Linux Kernel Vulnerability in Module Management by Vendor

CVE-2025-37995

What is CVE-2025-37995?

A vulnerability exists in the Linux kernel's module management system, where the function 'kobject_put()' may encounter an uninitialized pointer in error handling paths. This occurs in the 'lookup_or_create_module_kobject()' function, leading to potential inconsistencies when releasing module kobjects. An additional validation check has been introduced to ensure that 'kobject_put()' can operate safely, preventing unnecessary synchronization during the unloading process.

References