PT-2025-22274 · Linux+5 · Linux Kernel+5
Camm
+1
·
Published
2025-05-04
·
Updated
2026-04-20
·
CVE-2025-37991
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A vulnerability in the Linux kernel has been resolved, which caused a double SIGFPE crash on parisc. The issue occurred because glibc uses a double-word floating-point store to atomically update function descriptors, resulting in a floating-point store in fpe func almost immediately. When the T bit is set, an assist exception trap occurs when the co-processor encounters any floating-point instruction except for a double store of register %fr0. The issue can be reproduced with a test program.
Recommendations
To resolve the issue, clear the Trap (T) bit in the FP status register before returning to the signal handler in userspace.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Double Free
Improper Resource Release
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Ubuntu