Critical Use-After-Free Vulnerability in Linux Kernel Affecting Debian Packages
Summary
CVE-2025-37819: In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() With ACPI in place, gicv2m_get_fwnode() is registered with the pci subsystem as pci_msi_g... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware resources and providing essential services to software applications. It is widely used in various distributions, including Debian, which is known for its stability and security. This vulnerability specifically affects the Linux kernel versions in Debian 11, 12, and 13, posing a risk during PCI host bridge probes when ACPI is enabled.
Vulnerability Detail
In the Linux kernel, a use-after-free vulnerability has been identified in the function gicv2m_get_fwnode(). This function is incorrectly marked as __init, leading to its premature deallocation while still registered with the PCI subsystem. This can result in a kernel panic due to an inability to handle a paging request at a specific virtual address, which could potentially crash the system or lead to unauthorized access.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. However, avoiding the use of ACPI during PCI host bridge probes may mitigate the risk temporarily until a patch is applied.
Conclusion
The identified use-after-free vulnerability in the Linux kernel poses significant risks to systems running Debian 11, 12, and 13. It is crucial for users to update their kernel to the patched version to safeguard against potential exploits. Utilizing tools like Vulert can help monitor vulnerabilities effectively.
See every vulnerability recorded for linux →
FAQ
The vulnerability is a use-after-free issue in the Linux kernel that can lead to system crashes or unauthorized access.
Debian 11, 12, and 13 are all affected by this vulnerability in the Linux kernel.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. Visit Vulert Scanner to check if your application is affected without needing to sign up.
Yes, a patch has been released. Users should update their Linux kernel to the latest version to ensure they are protected.
If an immediate update is not possible, consider disabling ACPI during PCI host bridge probes as a temporary measure to reduce risk.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
