CVE-2025-37933
MEDIUM EPSS 5.8%
Published May 20, 20251y ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Published May 20, 2025 1y ago
Last Modified Jun 17, 2026 1w ago
Description
In the Linux kernel, the following vulnerability has been resolved: octeon_ep: Fix host hang issue during device reboot When the host loses heartbeat messages from the device, the driver calls the device-specific ndo_stop function, which frees the resources. If the driver is unloaded in this scenario, it calls ndo_stop again, attempting to free resources that have already been freed, leading to a host hang issue. To resolve this, dev_close should be called instead of the device-specific stop function.dev_close internally calls ndo_stop to stop the network interface and performs additional cleanup tasks. During the driver unload process, if the device is already down, ndo_stop is not called.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High
Threat Intelligence
EPSS Exploit Probability
5.8% percentile
Exploit & Patch Status
No Known Exploit
Patch Available
Weaknesses 1
CWE-415
Affected Products 7
References 4
- git.kernel.org https://git.kernel.org/stable/c/34f42736b325287a7b2ce37e415838f539767bda
- git.kernel.org https://git.kernel.org/stable/c/6d1052423518e7d0aece9af5e77bbc324face8f1
- git.kernel.org https://git.kernel.org/stable/c/7e1ca1bed3f66e00377f7d2147be390144924276
- git.kernel.org https://git.kernel.org/stable/c/c8d788f800f83b94d9db8b3dacc1d26be38a6ef4
Remediation
- git.kernel.org https://git.kernel.org/stable/c/34f42736b325287a7b2ce37e415838f539767bda
- git.kernel.org https://git.kernel.org/stable/c/6d1052423518e7d0aece9af5e77bbc324face8f1
- git.kernel.org https://git.kernel.org/stable/c/7e1ca1bed3f66e00377f7d2147be390144924276
- git.kernel.org https://git.kernel.org/stable/c/c8d788f800f83b94d9db8b3dacc1d26be38a6ef4