CVE-2025-37815
MEDIUMLinux Kernel - Denial of Service via IRQ Handler Registration
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: misc: microchip: pci1xxxx: Fix Kernel panic during IRQ handler registration Resolve kernel panic while accessing IRQ handler associated with the generated IRQ. This is done by acquiring the spinlock and storing the current interrupt state before handling the interrupt request using generic_handle_irq. A previous fix patch was submitted where 'generic_handle_irq' was replaced with 'handle_nested_irq'. However, this change also causes the kernel panic where after determining which GPIO triggered the interrupt and attempting to call handle_nested_irq with the mapped IRQ number, leads to a failure in locating the registered handler.
References (6)
Core 6
Core References
Mailing List, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html
Scores
CVSS v3
5.5
EPSS
0.0015
EPSS Percentile
5.1%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Details
Status
published
Products (22)
linux/Kernel
< 6.1.136linux
linux/Kernel
6.13.0 - 6.14.5linux
linux/Kernel
6.2.0 - 6.6.89linux
linux/Kernel
6.7.0 - 6.12.26linux
Linux/Linux
< 6.13
Linux/Linux
194f9f94a5169547d682e9bbcc5ae6d18a564735 - 18eb77c75ed01439f96ae5c0f33461eb5134b907
Linux/Linux
194f9f94a5169547d682e9bbcc5ae6d18a564735 - 4e02059dc91068bc5017b8546f9ec3b930f6d6a6
Linux/Linux
25692750c0259c5b65afec467d97201a485e8a00 - 62957f58ab3aa7fa792dc6ff3575624062539a4d
Linux/Linux
47d3749ec0cb56b7b98917c190a8c10cb54216fd - 12cc2193f2b9548e8ea5fbce8201b44158222edf
Linux/Linux
6.1.125 - 6.1.136
... and 12 more
Published
May 08, 2025
Tracked Since
Feb 18, 2026