CVE-2025-37905 is a medium severity vulnerability in the Linux kernel's arm_scmi firmware driver. It involves an unbalanced device reference count when destroying SCMI devices due to the use of device_find_child(), which implicitly increments the device reference count but does not balance it with a corresponding put_device(). This leads to device release methods not being called and memory not being freed properly, causing a memory leak detected by kmemleak.