PT-2025-22194 · Linux+5 · Linux Kernel+5
Published
2025-05-01
·
Updated
2026-04-20
·
CVE-2025-37933
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A host hang issue occurs during device reboot in the Linux kernel when the host loses heartbeat messages from the device. The driver calls the device-specific ndo stop function, which frees resources. If the driver is unloaded in this scenario, it calls ndo stop again, attempting to free resources that have already been freed. To resolve this, dev close should be called instead of the device-specific stop function, as it internally calls ndo stop to stop the network interface and performs additional cleanup tasks.
Recommendations
For the Linux kernel, to resolve the host hang issue, dev close should be called instead of the device-specific stop function during the driver unload process.
As a temporary workaround, consider restricting the unload of the driver when the device is already down to minimize the risk of exploitation.
Exploit
Fix
Double Free
Multiple Releases of Same Resource or Handle
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu