CVE-2025-37917

CVE-2025-37917

High · published May 20, 2025

CVSS v3.1
7.5
EPSS
1%
Percentile
45.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll

Use spin_lock_irqsave and spin_unlock_irqrestore instead of spin_lock

and spin_unlock in mtk_star_emac driver to avoid spinlock recursion

occurrence that can happen when enabling the DMA interrupts again in

rx/tx poll.

```

BUG: spinlock recursion on CPU#0, swapper/0/0

lock: 0xffff00000db9cf20, .magic: dead4ead, .owner: swapper/0/0,

.owner_cpu: 0

CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted

6.15.0-rc2-next-20250417-00001-gf6a27738686c-dirty #28 PREEMPT

Hardware name: MediaTek MT8365 Open Platform EVK (DT)

Call trace:

show_stack+0x18/0x24 (C)

dump_stack_lvl+0x60/0x80

dump_stack+0x18/0x24

spin_dump+0x78/0x88

do_raw_spin_lock+0x11c/0x120

_raw_spin_lock+0x20/0x2c

mtk_star_handle_irq+0xc0/0x22c [mtk_star_emac]

__handle_irq_event_percpu+0x48/0x140

handle_irq_event+0x4c/0xb0

handle_fasteoi_irq+0xa0/0x1bc

handle_irq_desc+0x34/0x58

generic_handle_domain_irq+0x1c/0x28

gic_handle_irq+0x4c/0x120

do_interrupt_handler+0x50/0x84

el1_interrupt+0x34/0x68

el1h_64_irq_handler+0x18/0x24

el1h_64_irq+0x6c/0x70

regmap_mmio_read32le+0xc/0x20 (P)

_regmap_bus_reg_read+0x6c/0xac

_regmap_read+0x60/0xdc

regmap_read+0x4c/0x80

mtk_star_rx_poll+0x2f4/0x39c [mtk_star_emac]

__napi_poll+0x38/0x188

net_rx_action+0x164/0x2c0

handle_softirqs+0x100/0x244

__do_softirq+0x14/0x20

____do_softirq+0x10/0x20

call_on_irq_stack+0x24/0x64

do_softirq_own_stack+0x1c/0x40

__irq_exit_rcu+0xd4/0x10c

irq_exit_rcu+0x10/0x1c

el1_interrupt+0x38/0x68

el1h_64_irq_handler+0x18/0x24

el1h_64_irq+0x6c/0x70

cpuidle_enter_state+0xac/0x320 (P)

cpuidle_enter+0x38/0x50

do_idle+0x1e4/0x260

cpu_startup_entry+0x34/0x3c

rest_init+0xdc/0xe0

console_on_rootfs+0x0/0x6c

__primary_switched+0x88/0x90

```

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00561 · 45.9th percentile
Published
2025-05-20T20:15Z
Affected products (9)
ProductVersionsFixed in
linux/linux_kernel≥ 6.0, < 6.1.1386.1.138
linux/linux_kernel≥ 6.2, < 6.6.906.6.90
linux/linux_kernel≥ 6.7, < 6.12.286.12.28
linux/linux_kernel≥ 6.13, < 6.14.66.14.6
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
debian/debian_linuxall versions—
References (9)
EPSS history
Timeline
  • 20 MAY 15:21Z
    net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll
    cvelistv5