Threats tagged 'ghsa-v46c-rcr5-cw3j'

CVE-2025-37765 is a medium severity vulnerability in the Linux kernel's drm/nouveau driver related to a use-after-free condition causing a general protection fault (oops). The flaw occurs due to dereferencing a dangling pointer in the ttm_bo_delayed_delete function, triggered by improper ordering of object destruction and delayed deletion. This results in a kernel oops and potential denial of service. The issue is fixed by reordering the call to drm_prime_gem_destroy to ensure safe deletion after delayed deletion tasks complete.