{"cve":"CVE-2025-37764","nvd":{"published":"2025-05-01T14:15:39.150","modified":"2026-06-17T09:15:23.580","status":"Analyzed","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/imagination: fix firmware memory leaks\n\nFree the memory used to hold the results of firmware image processing\nwhen the module is unloaded.\n\nFix the related issue of the same memory being leaked if processing\nof the firmware image fails during module load.\n\nEnsure all firmware GEM objects are destroyed if firmware image\nprocessing fails.\n\nFixes memory leaks on powervr module unload detected by Kmemleak:\n\nunreferenced object 0xffff000042e20000 (size 94208):\n  comm \"modprobe\", pid 470, jiffies 4295277154\n  hex dump (first 32 bytes):\n    02 ae 7f ed bf 45 84 00 3c 5b 1f ed 9f 45 45 05  .....E..<[...EE.\n    d5 4f 5d 14 6c 00 3d 23 30 d0 3a 4a 66 0e 48 c8  .O].l.=#0.:Jf.H.\n  backtrace (crc dd329dec):\n    kmemleak_alloc+0x30/0x40\n    ___kmalloc_large_node+0x140/0x188\n    __kmalloc_large_node_noprof+0x2c/0x13c\n    __kmalloc_noprof+0x48/0x4c0\n    pvr_fw_init+0xaa4/0x1f50 [powervr]\n\nunreferenced object 0xffff000042d20000 (size 20480):\n  comm \"modprobe\", pid 470, jiffies 4295277154\n  hex dump (first 32 bytes):\n    00 00 00 00 00 00 00 00 09 00 00 00 0b 00 00 00  ................\n    00 00 00 00 00 00 00 00 07 00 00 00 08 00 00 00  ................\n  backtrace (crc 395b02e3):\n    kmemleak_alloc+0x30/0x40\n    ___kmalloc_large_node+0x140/0x188\n    __kmalloc_large_node_noprof+0x2c/0x13c\n    __kmalloc_noprof+0x48/0x4c0\n    pvr_fw_init+0xb0c/0x1f50 [powervr]","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","score":5.5},"cwes":["CWE-401"],"references":["https://git.kernel.org/stable/c/490c30fd554597e78f66650044877e7defb5f83c","https://git.kernel.org/stable/c/891c12ba855ccb34c06a2e5da75c644683087036","https://git.kernel.org/stable/c/a5b230e7f3a55bd8bd8d012eec75a4b7baa671d5"],"products":["linux:linux_kernel"],"source":"nvd","synced_at":"2026-10-19T22:01:11.054312287+00:00"},"epss":{"cve":"CVE-2025-37764","score":0.00199,"percentile":0.09789,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}