{"id":"CVE-2025-38137","title":"PCI/pwrctrl: Cancel outstanding rescan work when unregistering","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nPCI/pwrctrl: Cancel outstanding rescan work when unregistering\n\nIt's possible to trigger use-after-free here by:\n\n  (a) forcing rescan_work_func() to take a long time a…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 8f62819aaace77dd85037ae766eb767f8c4417ce < a63ed775f476ba81558bba24d7538836e1ffb823","Linux >= 8f62819aaace77dd85037ae766eb767f8c4417ce < b3ad6d23fec23fbef382ce9ea640c37446593cf5","Linux >= 8f62819aaace77dd85037ae766eb767f8c4417ce < 8b926f237743f020518162c62b93cb7107a2b5eb","Linux 6.11"],"published":"2025-07-03","updated":"2026-10-21","sourceUpdated":"2026-10-21T12:36:46.881Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-38137","references":[{"url":"https://git.kernel.org/stable/c/a63ed775f476ba81558bba24d7538836e1ffb823"},{"url":"https://git.kernel.org/stable/c/b3ad6d23fec23fbef382ce9ea640c37446593cf5"},{"url":"https://git.kernel.org/stable/c/8b926f237743f020518162c62b93cb7107a2b5eb"}],"tags":["cve.org"],"epss":0.00228,"epssPercentile":0.13566,"ingestedAt":"2026-10-21T12:48:53.705Z","slug":"CVE-2025-38137","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nPCI/pwrctrl: Cancel outstanding rescan work when unregistering\n\nIt's possible to trigger use-after-free here by:\n\n  (a) forcing rescan_work_func() to take a long time and\n  (b) utilizing a pwrctrl driver that may be unloaded for some reason\n\nCancel outstanding work to ensure it is finished before we allow our data\nstructures to be cleaned up.\n\n[bhelgaas: tidy commit log]\n\n## Affected\n\n- `Linux >= 8f62819aaace77dd85037ae766eb767f8c4417ce < a63ed775f476ba81558bba24d7538836e1ffb823`\n- `Linux >= 8f62819aaace77dd85037ae766eb767f8c4417ce < b3ad6d23fec23fbef382ce9ea640c37446593cf5`\n- `Linux >= 8f62819aaace77dd85037ae766eb767f8c4417ce < 8b926f237743f020518162c62b93cb7107a2b5eb`\n- `Linux 6.11`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}