PT-2025-22194
CVE-2025-37933
·
Published
2025-05-01
·
Updated
2026-10-13
Description by
CVSS 3.1
7.0
HighMetricsAV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A host hang issue occurs during device reboot in the Linux kernel when the host loses heartbeat messages from the device. The driver calls the device-specific ndo stop function, which frees resources. If the driver is unloaded in this scenario, it calls ndo stop again, attempting to free resources that have already been freed. To resolve this, dev close should be called instead of the device-specific stop function, as it internally calls ndo stop to stop the network interface and performs additional cleanup tasks.
Recommendations
For the Linux kernel, to resolve the host hang issue, dev close should be called instead of the device-specific stop function during the driver unload process.
As a temporary workaround, consider restricting the unload of the driver when the device is already down to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾