CVE-2025-37935: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: fix SER panic with 4GB+ RAM If the mtk_poll_rx() function detects the MTK_RESETTING flag, it will jump to release_desc and refill the high word of the SDP on the 4GB RFB. Subsequently, mtk_rx_clean will process an incorrect SDP, leading to a panic. Add patch from MediaTek's SDK to resolve this.

Affected products

• Linux Linux Kernel: from 6.6, before 6.6.90 (fixed in 6.6.90); from 6.7, before 6.12.28 (fixed in 6.12.28); from 6.13, before 6.14.6 (fixed in 6.14.6); version 6.15 only

Published 2025-05-20. Last modified 2026-07-30.