CVE-2025-37762: 
Linux Kernel vulnerability analysis and mitigation

CVE-2025-37762 is a vulnerability discovered in the Linux kernel affecting the DRM (Direct Rendering Manager) Virtio driver. The issue was disclosed on May 1, 2025, and involves a resource leak in the error handling path of the prepare_fb() function. Specifically, the vulnerability relates to missed dmabuf unpinning when an error occurs during the prepare_fb() operation (Wiz, NVD).

The vulnerability exists in the DRM Virtio driver's prepare_fb() function where proper error handling was not implemented, leading to resource leakage. When an error occurs during the prepare_fb() operation, the driver fails to unpin the dmabuf properly, resulting in resource leaks. The vulnerability has been assigned a CVSS v3 Base Score of 5.5, indicating moderate severity (Red Hat).

The vulnerability can lead to resource leaks in the Linux kernel when errors occur during the prepare_fb() operation in the DRM Virtio driver. This could potentially result in system resource exhaustion over time if the error condition is repeatedly triggered (Wiz).

The vulnerability has been patched in the Linux kernel by implementing correct error handling in the prepare_fb() function to properly unpin dmabuf resources when errors occur. Users are advised to update their Linux kernel to the latest version that includes this fix (Wiz).