CVE-2025-37819

A flaw was found in the Linux kernel's irqchip/gic-v2m component. This vulnerability allows a use-after-free condition via gicv2m_get_fwnode() being wrongly marked as __init, causing it to be freed while still registered with the PCI (Peripheral Component Interconnect) subsystem during a PCI host bridge probe.

A use-after-free flaw was found in the Linux kernel irqchip/gic-v2m module during a PCI host bridge probe, where a privileged user (PR:H) may access a callback which is already freed with the PCI subsystem leading to a DoS and kernel information leak problem.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.