9.8
CVSS 3.1
Няма данни
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Няма потвърждение
Атакува се
Няма данни
Време до експлоатация
Атакува се по мрежата, без особени условия, без вход и без действие от потребителя.
Описание
Оригинално описание
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: fix SER panic with 4GB+ RAM If the mtk_poll_rx() function detects the MTK_RESETTING flag, it will jump to release_desc and refill the high word of the SDP on the 4GB RFB. Subsequently, mtk_rx_clean will process an incorrect SDP, leading to a panic. Add patch from MediaTek's SDK to resolve this.
Засегнати продукти
- Linux Linux: 2d75891ebc09ba9cf30697dfd54497ef0220308f преди cb625f783f70dc6614f03612b8e64ad99cb0a13c; 2d75891ebc09ba9cf30697dfd54497ef0220308f преди 317013d1ad13524be02d60b9e98f08fbd13f8c14; 2d75891ebc09ba9cf30697dfd54497ef0220308f преди 67619cf69dec5d1d7792808dfa548616742dd51d; 2d75891ebc09ba9cf30697dfd54497ef0220308f преди 6e0490fc36cdac696f96e57b61d93b9ae32e0f4c
- Linux Linux: 6.6; преди 6.6; 6.6.90 до 6.6.*; 6.12.28 до 6.12.*; 6.14.6 до 6.14.*; от 6.15 нататък
История
- 20 май 2025 Публикувано
Други уязвимости в Linux Linux
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2025-37935
- https://nvd.nist.gov/vuln/detail/CVE-2025-37935
- https://git.kernel.org/stable/c/cb625f783f70dc6614f03612b8e64ad99cb0a13c
- https://git.kernel.org/stable/c/317013d1ad13524be02d60b9e98f08fbd13f8c14
- https://git.kernel.org/stable/c/67619cf69dec5d1d7792808dfa548616742dd51d
- https://git.kernel.org/stable/c/6e0490fc36cdac696f96e57b61d93b9ae32e0f4c