CVE-2025-37916 is a use-after-free vulnerability in the Linux kernel's pds_core component. The flaw involves a write-after-free of the client_id during device removal, which can lead to memory corruption. The issue was discovered during stress testing with KFENCE detecting the use-after-free write. The vulnerability arises because the device uninitialization occurs on a separate thread without guaranteed execution order, and the code unnecessarily clears client_id, causing the error. The fix involved removing the code that clears client_id at this point.