CVE-2025-37949

CVE-2025-37949 affects the Linux kernel xenbus subsystem. The issue arises when a request’s wake-up path (xs_wake_up) may coexist with a freed req, causing a NULL-dereference on resume due to lifetimes tracked by a single kref. The fix introduces two kref tracks per request (one for the caller, o...

CVE-2025-37949 xenbus: Use kref to track req lifetime

In the Linux kernel, the following vulnerability has been resolved: xenbus: Use kref to track req lifetime Marek reported seeing a NULL pointer fault in the xenbusthread callstack: BUG: kernel NULL pointer dereference, address: 0000000000000000 RIP: e030:wakeupcommon+0x4c/0x180 Call Trace:...