A subtle lifetime-management bug in the Linux kernel’s module subsystem — tracked as CVE-2025-37995 — can lead to the kernel dereferencing an uninitialized completion pointer when code calls kobject_put() on certain internal module kobjects, creating a locally-triggered denial‑of‑service risk...