Critical Vulnerability in Linux Kernel: Accessing Freed IRQ Affinity Hint
Summary
DEBIAN-CVE-2025-23155: In the Linux kernel, the following vulnerability has been resolved: net: stmmac: Fix accessing freed irq affinity_hint The cpumask should not be a local variable, since its pointer is saved to irq_desc and may be accesse... Affects linux versions < 6.12.37-1. Fixed in 6.12.37-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware resources and providing essential services to applications. It supports a wide range of functionalities, including process management, memory management, and device control. The kernel is crucial for system stability and performance, making it a prime target for vulnerabilities. This specific vulnerability affects the Linux kernel versions in Debian 13 and 14, potentially compromising system integrity and security.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the net: stmmac module, where the cpumask is incorrectly handled as a local variable. This oversight allows the pointer to the cpumask to be saved in irq_desc, which can be accessed from procfs, leading to potential exploitation. The ramifications include possible system crashes or unauthorized access to sensitive data, as the freed memory may be accessed by malicious actors.
How To Fix
Minimum fixed version
6.12.37-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds provided for this vulnerability. The best course of action is to apply the patch by updating the kernel as mentioned above.
Conclusion
The identified vulnerability in the Linux kernel poses significant risks to system security and stability. It is crucial for users to update their kernel to the patched version 6.12.37-1 to mitigate these risks. Regular monitoring for vulnerabilities using tools like Vulert can help maintain system integrity.
See every vulnerability recorded for linux →
FAQ
The vulnerability involves improper handling of the cpumask in the Linux kernel, which can lead to accessing freed memory.
The vulnerability affects the Linux kernel versions in Debian 13 and 14 prior to the patch version 6.12.37-1.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without requiring a signup.
Exploitation of this vulnerability could lead to system crashes or unauthorized access to sensitive data, compromising system integrity.
Yes, if exploited, there is a risk of data loss or corruption as the freed memory may be accessed by unauthorized users.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
