CVE-2025-37935
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk34th percentile - higher than 34% of all known CVEs
Summary
In the mtk_eth_soc Ethernet driver (Linux kernel), a bug was found causing a system panic with 4GB+ RAM. The mtk_poll_rx() function incorrectly handled the MTK_RESETTING flag, leading to processing of an incorrect SDP descriptor and a panic.
Risk Assessment
The organization may experience system crashes (panic) when working with large amounts of RAM, leading to service disruptions.
Recommendation
Update the Linux kernel to a version containing the fix for CVE-2025-37935.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: fix SER panic with 4GB+ RAM If the mtk_poll_rx() function detects the MTK_RESETTING flag, it will jump to release_desc and refill the high word of the SDP on the 4GB RFB. Subsequently, mtk_rx_clean will process an incorrect SDP, leading to a panic. Add patch from MediaTek's SDK to resolve this.