CVE-2025-37935

net: ethernet: mtk_eth_soc: fix SER panic with 4GB+ RAM

Description

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: fix SER panic with 4GB+ RAM If the mtk_poll_rx() function detects the MTK_RESETTING flag, it will jump to release_desc and refill the high word of the SDP on the 4GB RFB. Subsequently, mtk_rx_clean will process an incorrect SDP, leading to a panic. Add patch from MediaTek's SDK to resolve this.

N/A

CVSS

Severity:

EPSS 0.02%

Affected: Linux Linux

References

Link	Tags
https://git.kernel.org/stable/c/cb625f783f70dc6614f03612b8e64ad99cb0a13c
https://git.kernel.org/stable/c/317013d1ad13524be02d60b9e98f08fbd13f8c14
https://git.kernel.org/stable/c/67619cf69dec5d1d7792808dfa548616742dd51d
https://git.kernel.org/stable/c/6e0490fc36cdac696f96e57b61d93b9ae32e0f4c

Frequently Asked Questions

What is the severity of CVE-2025-37935?: CVE-2025-37935 has not yet been assigned a CVSS score.
How to fix CVE-2025-37935?: To fix CVE-2025-37935, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2025-37935 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2025-37935 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2025-37935?: CVE-2025-37935 affects Linux Linux, Linux Linux.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.