CVE-2025-37838

Summary

CVE-2025-37838 is a use-after-free vulnerability affecting the Linux kernel's ssi_protocol Driver. This issue arises due to a race condition in the ssi_protocol_probe() function, where the work associated with a specific structure is bound to ssip_xmit_work() in ssip_pn_setup(). If the module using this driver is removed, leading to a call to ssi_protocol_remove() and the subsequent freeing of the ssi structure, the work will still be in use. This may result in a use-after-free (UAF) bug. To mitigate this vulnerability, ensure the work is canceled before proceeding with the cleanup in ssi_protocol_remove().

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.