CVE-2025-37935: net: ethernet: mtk_eth_soc: fix SER panic with 4GB+ RAM
In the Linux kernel, the following vulnerability has been resolved:
net: ethernet: mtkethsoc: fix SER panic with 4GB+ RAM
If the mtkpollrx() function detects the MTKRESETTING flag, it will jump to releasedesc and refill the high word of the SDP on the 4GB RFB. Subsequently, mtkrxclean will process an incorrect SDP, leading to a panic.
Add patch from MediaTek's SDK to resolve this.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-37935?
The severity of CVE-2025-37935 is classified as medium, due to its potential impact on device stability.
How do I fix CVE-2025-37935?
To fix CVE-2025-37935, update your Linux kernel to the latest patched version provided by your distribution.
What impact does CVE-2025-37935 have on Linux Kernel users?
CVE-2025-37935 can cause system panics in devices with 4GB or more RAM, resulting in stability issues.
Which versions of the Linux Kernel are affected by CVE-2025-37935?
CVE-2025-37935 affects specific versions of the Linux Kernel that include the vulnerable code linked to the MTK polled RX functionality.
Is there a workaround for CVE-2025-37935 until I can update my Linux Kernel?
No effective workaround has been reported for CVE-2025-37935, so an update is recommended as soon as possible.