CVE-2025-37935

net: ethernet: mtk_eth_soc: fix SER panic with 4GB+ RAM

MEDIUM

5.5

CVSS Score

Published: May 20, 2025 at 03:21 PM UTC

Updated: August 5, 2026 at 12:44 PM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.5%

Description

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: fix SER panic with 4GB+ RAM If the mtk_poll_rx() function detects the MTK_RESETTING flag, it will jump to release_desc and refill the high word of the SDP on the 4GB RFB. Subsequently, mtk_rx_clean will process an incorrect SDP, leading to a panic. Add patch from MediaTek's SDK to resolve this.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

6.13 ≤ v < 6.14.66.6 ≤ v < 6.12.286.6 ≤ v < 6.14.66.6 ≤ v < 6.156.6 ≤ v < 6.6.906.7 ≤ v < 6.12.282d75891ebc09ba9cf30697dfd54497ef0220308f6.15 rc1 6.15 rc2 6.15 rc3 6.15 rc4

Vendor states this is fixed in 317013d1ad13524be02d60b9e98f08fbd13f8c14 (fixed)

Vendor states this is fixed in 67619cf69dec5d1d7792808dfa548616742dd51d (fixed)

Vendor states this is fixed in 6e0490fc36cdac696f96e57b61d93b9ae32e0f4c (fixed)

Vendor states this is fixed in cb625f783f70dc6614f03612b8e64ad99cb0a13c (fixed)

Vendor states this is fixed in 6.12.28 (unaffected)

Vendor states this is fixed in 6.14.6 (unaffected)

Vendor states this is fixed in 6.15 (unaffected)

Vendor states this is fixed in 6.6 (unaffected)

Vendor states this is fixed in 6.6.90 (unaffected)