CVE-2025-37796

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-37796
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-37796.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-37796
Downstream
Related
Published
2025-05-01T13:07:27Z
Modified
2026-08-12T03:30:29Z
Summary
wifi: at76c50x: fix use after free access in at76_disconnect
Details

In the Linux kernel, the following vulnerability has been resolved:

wifi: at76c50x: fix use after free access in at76_disconnect

The memory pointed to by priv is freed at the end of at76_delete_device function (using ieee80211_free_hw). But the code then accesses the udev field of the freed object to put the USB device. This may also lead to a memory leak of the usb device. Fix this by using udev from interface.

Database specific 
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/37xxx/CVE-2025-37796.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
29e20aa6c6aff35c81d4da2e2cd516dadb569061
Fixed
c731cdfddcf1be1590d5ba8c9b508f98e3a2b3d6
Fixed
6e4ab3e574c2a335b40fa1f70d1c54fcb58ab33f
Fixed
3c619aec1f538333b56746d2f796aab1bca5c9a5
Fixed
5e7df74745700f059dc117a620e566964a2e8f2c
Fixed
7ca513631fa6ad3011b8b9197cdde0f351103704
Fixed
a9682bfef2cf3802515a902e964d774e137be1b9
Fixed
152721cbae42713ecfbca6847e0f102ee6b19546
Fixed
27c7e63b3cb1a20bb78ed4a36c561ea4579fd7da

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-37796.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.17.0
Fixed
5.4.293
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.237
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.181
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.135
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.88
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.25
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.14.4

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-37796.json"