CVE-2025-37765 – A use-after-free vulnerability in the Linux ker... (How to Fix)

Q: What is the severity of CVE-2025-37765?

CVE-2025-37765 has a CVSS score of 5.5 (MEDIUM). A use-after-free vulnerability in the Linux kernel's Nouveau DRM driver allows local attackers to cause a kernel panic (denial of service) by triggering a race condition during buffer object cleanup. This affects systems using the open-source Nouveau graphics driver for NVIDIA GPUs with kernel versions containing the vulnerable code. The vulnerability requires local access to exploit.

📋 TL;DR

A use-after-free vulnerability in the Linux kernel's Nouveau DRM driver allows local attackers to cause a kernel panic (denial of service) by triggering a race condition during buffer object cleanup. This affects systems using the open-source Nouveau graphics driver for NVIDIA GPUs with kernel versions containing the vulnerable code. The vulnerability requires local access to exploit.

💻 Affected Systems

Products:

Linux kernel with Nouveau DRM driver

Versions: Kernel versions containing the vulnerable commit up to fixes in stable releases (specific versions depend on distribution backports)

Operating Systems: Linux distributions using affected kernel versions

Default Config Vulnerable: ⚠️ Yes

Notes: Only affects systems using the Nouveau open-source NVIDIA driver. Systems using proprietary NVIDIA drivers or other GPUs are not affected.

📦 What is this software?

Debian Linux by Debian

View all CVEs affecting Debian Linux →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

⚠️ Risk & Real-World Impact

🔴

Worst Case

Kernel panic leading to system crash and denial of service, potentially causing data loss or service disruption.

🟠

Likely Case

Local denial of service through kernel panic when specific graphics operations are performed.

🟢

If Mitigated

No impact if patched or if Nouveau driver is not in use.

🌐 Internet-Facing: LOW - Requires local access to exploit, not remotely exploitable.

🏢 Internal Only: MEDIUM - Local users or processes could crash the kernel, affecting system stability.

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: NO

Unauthenticated Exploit: ✅ No

Complexity: MEDIUM

Exploitation requires local access and triggering specific race conditions during graphics buffer cleanup operations.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Fixed in kernel stable releases via commits: 12b038d521c75e3521522503becf3bc162628469, 31e94c7989572f96926673614a3b958915a13ca9, 47761deabb69a5df0c2c4ec400d80bb3e072bd2e, 6b95947ee780f4e1fb26413a1437d05bcb99712b, 6e2c805996a49998d31ac522beb1534ca417e761

Vendor Advisory: https://git.kernel.org/stable/c/12b038d521c75e3521522503becf3bc162628469

Restart Required: Yes

Instructions:

1. Update Linux kernel to version containing the fix. 2. Check distribution-specific security advisories for backported patches. 3. Reboot system after kernel update.

🔧 Temporary Workarounds

Disable Nouveau driver

linux

Blacklist Nouveau kernel module to prevent loading

echo 'blacklist nouveau' >> /etc/modprobe.d/blacklist-nouveau.conf
update-initramfs -u
reboot

Use proprietary NVIDIA driver

linux

Replace Nouveau with official NVIDIA proprietary driver

apt-get install nvidia-driver-XXX # Debian/Ubuntu
yum install nvidia-driver # RHEL/CentOS

🧯 If You Can't Patch

Restrict local user access to systems using Nouveau driver
Monitor kernel logs for crash signatures related to ttm_bo_delayed_delete

🔍 How to Verify

Check if Vulnerable:

Check kernel version and if Nouveau module is loaded: lsmod | grep nouveau && uname -r

Check Version:

uname -r

Verify Fix Applied:

Verify kernel version is updated beyond vulnerable commits and check dmesg for absence of ttm_bo_delayed_delete crashes

📡 Detection & Monitoring

Log Indicators:

Kernel panic messages with ttm_bo_delayed_delete in call trace
General protection fault errors referencing dma_resv_iter_first_unlocked

Network Indicators:

None - local exploitation only

SIEM Query:

kernel.panic OR "general protection fault" AND "ttm_bo_delayed_delete"

📊 Metadata

CVE ID: CVE-2025-37765

CVSS v3 Score: 5.5 (MEDIUM)

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE: CWE-416

EPSS Score: 0.03% exploit probability (6.2th percentile)

Published: May 1, 2025

Last Updated: November 4, 2025

🔗 References

📤 Share & Export

📄 Export Markdown 📋 Export JSON

🔗 Related Vulnerabilities

If you're affected by CVE-2025-37765, you might also want to check these: