CVE-2025-37842

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved. The issue is related to the spi: fsl-qspi driver, where the use of devm APIs to manage resources and the legacy remove function could trigger a kernel panic during device detachment. The problem is resolved by dropping the remove function and using devm add action or reset() for driver cleanup. The vulnerability can be triggered on i.MX8MQ devices.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.