Kernel Panic Vulnerability in Linux Packages: CVE-2025-37815
Summary
CVE-2025-37815: In the Linux kernel, the following vulnerability has been resolved: misc: microchip: pci1xxxx: Fix Kernel panic during IRQ handler registration Resolve kernel panic while accessing IRQ handler associated with the generat... Affects linux versions < 6.1.137-1. Fixed in 6.1.137-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of the operating system that manages hardware and system resources. It provides essential services for all other parts of the operating system and is critical for system stability and performance. This vulnerability affects Debian versions 12 and 13 of the Linux package, which are widely used in various distributions. The vulnerability can lead to a kernel panic, causing system instability and potential data loss.
Vulnerability Detail
CVE-2025-37815 is a vulnerability in the Linux kernel related to the IRQ (Interrupt Request) handler registration process. The issue arises when the system attempts to access the IRQ handler associated with a generated IRQ, leading to a kernel panic. This is caused by a failure in properly managing the interrupt state and spinlocks during the handling of interrupts. A previous fix that replaced 'generic_handle_irq' with 'handle_nested_irq' inadvertently introduced another kernel panic, as it failed to locate the registered handler after determining the GPIO that triggered the interrupt.
How To Fix
Minimum fixed version
6.1.137-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is advisable to apply the patch as soon as it becomes available to prevent potential kernel panics.
Conclusion
CVE-2025-37815 is a significant vulnerability in the Linux kernel that can lead to kernel panics, affecting system stability. It is essential to update to the latest patched version of the Linux package to ensure system integrity and prevent potential issues. Monitoring tools like Vulert can help keep track of vulnerabilities in your software.
See every vulnerability recorded for linux →
FAQ
CVE-2025-37815 is a vulnerability in the Linux kernel that can cause a kernel panic during IRQ handler registration.
The vulnerability affects Debian versions 12 and 13 of the Linux package.
The vulnerability can lead to kernel panics, causing system instability and potential data loss.
You can use Vulert, which monitors open-source vulnerabilities in real-time. Visit Vulert Scanner to check if your application is affected without requiring any signup.
While there are no specific workarounds, it is crucial to plan for an update as soon as possible to mitigate risks associated with this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
