{"id":"CVE-2025-37836","title":"PCI: Fix reference leak in pci_register_host_bridge()","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: Fix reference leak in pci_register_host_bridge()\n\nIf device_register() fails, call put_device() to give up the reference to\navoid a memory leak, per the comment at…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 37d6a0a6f4700ad3ae7bbf8db38b4557e97b3fe4 < f4db1b2c9ae3d013733c302ee70cac943b7070c0","Linux >= 37d6a0a6f4700ad3ae7bbf8db38b4557e97b3fe4 < 3297497ad2246eb9243849bfbbc57a0dea97d76e","Linux >= 37d6a0a6f4700ad3ae7bbf8db38b4557e97b3fe4 < b783478e0c53ffb4f04f25fb4e21ef7f482b05df","Linux >= 37d6a0a6f4700ad3ae7bbf8db38b4557e97b3fe4 < bd2a352a0d72575f1842d28c14c10089f0cfe1ae","Linux >= 37d6a0a6f4700ad3ae7bbf8db38b4557e97b3fe4 < 9707d0c932f41006a2701afc926b232b50e356b4","Linux >= 37d6a0a6f4700ad3ae7bbf8db38b4557e97b3fe4 < bbba4c50a2d2a1d3f3bf31cc4b8280cb492bf2c7","Linux >= 37d6a0a6f4700ad3ae7bbf8db38b4557e97b3fe4 < f9208aec86226524ec1cb68a09ac70e974ea6536","Linux >= 37d6a0a6f4700ad3ae7bbf8db38b4557e97b3fe4 < 804443c1f27883926de94c849d91f5b7d7d696e9","Linux 4.10"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T20:41:45.918463Z"},"published":"2025-05-09","updated":"2026-11-05","sourceUpdated":"2026-11-05T20:52:04.416Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-37836","references":[{"url":"https://git.kernel.org/stable/c/f4db1b2c9ae3d013733c302ee70cac943b7070c0"},{"url":"https://git.kernel.org/stable/c/3297497ad2246eb9243849bfbbc57a0dea97d76e"},{"url":"https://git.kernel.org/stable/c/b783478e0c53ffb4f04f25fb4e21ef7f482b05df"},{"url":"https://git.kernel.org/stable/c/bd2a352a0d72575f1842d28c14c10089f0cfe1ae"},{"url":"https://git.kernel.org/stable/c/9707d0c932f41006a2701afc926b232b50e356b4"},{"url":"https://git.kernel.org/stable/c/bbba4c50a2d2a1d3f3bf31cc4b8280cb492bf2c7"},{"url":"https://git.kernel.org/stable/c/f9208aec86226524ec1cb68a09ac70e974ea6536"},{"url":"https://git.kernel.org/stable/c/804443c1f27883926de94c849d91f5b7d7d696e9"}],"tags":["cve.org"],"epss":0.00314,"epssPercentile":0.24481,"ingestedAt":"2026-11-05T22:38:31.882Z","slug":"CVE-2025-37836","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nPCI: Fix reference leak in pci_register_host_bridge()\n\nIf device_register() fails, call put_device() to give up the reference to\navoid a memory leak, per the comment at device_register().\n\nFound by code review.\n\n[bhelgaas: squash Dan Carpenter's double free fix from\nhttps://lore.kernel.org/r/db806a6c-a91b-4e5a-a84b-6b7e01bdac85@stanley.mountain]\n\n## Affected\n\n- `Linux >= 37d6a0a6f4700ad3ae7bbf8db38b4557e97b3fe4 < f4db1b2c9ae3d013733c302ee70cac943b7070c0`\n- `Linux >= 37d6a0a6f4700ad3ae7bbf8db38b4557e97b3fe4 < 3297497ad2246eb9243849bfbbc57a0dea97d76e`\n- `Linux >= 37d6a0a6f4700ad3ae7bbf8db38b4557e97b3fe4 < b783478e0c53ffb4f04f25fb4e21ef7f482b05df`\n- `Linux >= 37d6a0a6f4700ad3ae7bbf8db38b4557e97b3fe4 < bd2a352a0d72575f1842d28c14c10089f0cfe1ae`\n- `Linux >= 37d6a0a6f4700ad3ae7bbf8db38b4557e97b3fe4 < 9707d0c932f41006a2701afc926b232b50e356b4`\n- `Linux >= 37d6a0a6f4700ad3ae7bbf8db38b4557e97b3fe4 < bbba4c50a2d2a1d3f3bf31cc4b8280cb492bf2c7`\n- `Linux >= 37d6a0a6f4700ad3ae7bbf8db38b4557e97b3fe4 < f9208aec86226524ec1cb68a09ac70e974ea6536`\n- `Linux >= 37d6a0a6f4700ad3ae7bbf8db38b4557e97b3fe4 < 804443c1f27883926de94c849d91f5b7d7d696e9`\n- `Linux 4.10`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}