Critical Vulnerability in Linux Package: MTK Ethernet Panic Issue
Summary
DEBIAN-CVE-2025-37935: In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: fix SER panic with 4GB+ RAM If the mtk_poll_rx() function detects the MTK_RESETTING flag, it will jump to release_desc and r... Affects linux versions < 6.12.29-1. Fixed in 6.12.29-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux package is a core component of the Debian operating system, providing essential functionalities for managing hardware and system resources. It is widely used across various distributions and is critical for system stability and performance. This specific vulnerability affects the MTK Ethernet driver, which is responsible for handling network communications on devices using MediaTek chipsets.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the MTK Ethernet driver, specifically in the mtk_poll_rx() function. When this function detects the MTK_RESETTING flag, it improperly handles the high word of the SDP on 4GB RAM systems. This leads to the processing of an incorrect SDP, which can cause the system to panic, resulting in a crash. The vulnerability is critical as it can disrupt network communications and overall system stability, particularly in environments relying on MediaTek hardware.
How To Fix
Minimum fixed version
6.12.29-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds provided for this vulnerability. The best course of action is to apply the patch as soon as it is available.
Conclusion
The identified vulnerability in the Linux package poses a significant risk to systems utilizing MediaTek hardware, leading to potential crashes and instability. Users are strongly encouraged to update to the patched version to ensure system security and reliability.
See every vulnerability recorded for linux →
FAQ
The vulnerability involves a panic issue in the MTK Ethernet driver when handling network communications on systems with 4GB or more RAM.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The vulnerability can lead to system crashes and instability, particularly affecting network operations on devices using MediaTek chipsets.
Yes, the patch is included in the version 6.12.29-1 of the Linux package. Users are advised to update to this version.
While there are no specific workarounds, it is recommended to monitor the situation and apply the patch as soon as possible to mitigate risks.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
