---
id: CVE-2025-38137
title: 'PCI/pwrctrl: Cancel outstanding rescan work when unregistering'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  PCI/pwrctrl: Cancel outstanding rescan work when unregistering

  It's possible to trigger use-after-free here by:

    (a) forcing rescan_work_func() to take a long time a…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 8f62819aaace77dd85037ae766eb767f8c4417ce <
    a63ed775f476ba81558bba24d7538836e1ffb823
  - >-
    Linux >= 8f62819aaace77dd85037ae766eb767f8c4417ce <
    b3ad6d23fec23fbef382ce9ea640c37446593cf5
  - >-
    Linux >= 8f62819aaace77dd85037ae766eb767f8c4417ce <
    8b926f237743f020518162c62b93cb7107a2b5eb
  - Linux 6.11
published: '2025-07-03'
updated: '2026-10-21'
sourceUpdated: '2026-10-21T12:36:46.881Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-38137'
references:
  - url: 'https://git.kernel.org/stable/c/a63ed775f476ba81558bba24d7538836e1ffb823'
  - url: 'https://git.kernel.org/stable/c/b3ad6d23fec23fbef382ce9ea640c37446593cf5'
  - url: 'https://git.kernel.org/stable/c/8b926f237743f020518162c62b93cb7107a2b5eb'
tags:
  - cve.org
epss: 0.00228
epssPercentile: 0.13566
ingestedAt: '2026-10-21T12:48:53.705Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

PCI/pwrctrl: Cancel outstanding rescan work when unregistering

It's possible to trigger use-after-free here by:

  (a) forcing rescan_work_func() to take a long time and
  (b) utilizing a pwrctrl driver that may be unloaded for some reason

Cancel outstanding work to ensure it is finished before we allow our data
structures to be cleaned up.

[bhelgaas: tidy commit log]

## Affected

- `Linux >= 8f62819aaace77dd85037ae766eb767f8c4417ce < a63ed775f476ba81558bba24d7538836e1ffb823`
- `Linux >= 8f62819aaace77dd85037ae766eb767f8c4417ce < b3ad6d23fec23fbef382ce9ea640c37446593cf5`
- `Linux >= 8f62819aaace77dd85037ae766eb767f8c4417ce < 8b926f237743f020518162c62b93cb7107a2b5eb`
- `Linux 6.11`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.