CVE-2025-37974

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
20/05/2025
Last modified:
21/05/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> s390/pci: Fix missing check for zpci_create_device() error return<br /> <br /> The zpci_create_device() function returns an error pointer that needs to<br /> be checked before dereferencing it as a struct zpci_dev pointer. Add the<br /> missing check in __clp_add() where it was missed when adding the<br /> scan_list in the fixed commit. Simply not adding the device to the scan<br /> list results in the previous behavior.

Impact