CVE-2025-37933: octeon_ep: Fix host hang issue during device reboot
In the Linux kernel, the following vulnerability has been resolved:
octeonep: Fix host hang issue during device reboot
When the host loses heartbeat messages from the device, the driver calls the device-specific ndostop function, which frees the resources. If the driver is unloaded in this scenario, it calls ndostop again, attempting to free resources that have already been freed, leading to a host hang issue. To resolve this, devclose should be called instead of the device-specific stop function.devclose internally calls ndostop to stop the network interface and performs additional cleanup tasks. During the driver unload process, if the device is already down, ndostop is not called.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-37933?
CVE-2025-37933 has been classified with a severity level that warrants attention due to its impact on the Linux kernel.
How do I fix CVE-2025-37933?
To fix CVE-2025-37933, ensure you update to the latest version of the Linux kernel where the vulnerability has been resolved.
What systems are affected by CVE-2025-37933?
CVE-2025-37933 affects systems running an impacted version of the Linux kernel.
What kind of vulnerability is CVE-2025-37933?
CVE-2025-37933 is a device handling vulnerability that can cause host hang issues during device reboot.
Is there a workaround for CVE-2025-37933?
Currently, the best approach for CVE-2025-37933 is to apply the latest security patches rather than relying on workarounds.