CVE-2025-37974
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
20/05/2025
Last modified:
21/05/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
s390/pci: Fix missing check for zpci_create_device() error return<br />
<br />
The zpci_create_device() function returns an error pointer that needs to<br />
be checked before dereferencing it as a struct zpci_dev pointer. Add the<br />
missing check in __clp_add() where it was missed when adding the<br />
scan_list in the fixed commit. Simply not adding the device to the scan<br />
list results in the previous behavior.