CVE-2025-37897

一、漏洞信息
 漏洞编号：[CVE-2025-37897](https://nvd.nist.gov/vuln/detail/CVE-2025-37897)
 漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)
 漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.19,6.4.0,6.6.0
 CVSS V3.0分值：
  BaseScore：N/A None
  Vector：CVSS：3.0/
 漏洞简述：
  In the Linux kernel, the following vulnerability has been resolved:wifi: plfxlc: Remove erroneous assert in plfxlc_mac_releaseplfxlc_mac_release() asserts that mac->lock is held. This assertion isincorrect, because even if it was possible, it would not be the validbehaviour. The function is used when probe fails or after the device isdisconnected. In both cases mac->lock can not be held as the driver isnot working with the device at the moment. All functions that use mac->lockunlock it just after it was held. There is also no need to hold mac->lockfor plfxlc_mac_release() itself, as mac data is not affected, except formac->flags, which is modified atomically.This bug leads to the following warning:================================================================WARNING: CPU: 0 PID: 127 at drivers/net/wireless/purelifi/plfxlc/mac.c:106 plfxlc_mac_release+0x7d/0xa0Modules linked in:CPU: 0 PID: 127 Comm: kworker/0:2 Not tainted 6.1.124-syzkaller #0Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024Workqueue: usb_hub_wq hub_eventRIP: 0010:plfxlc_mac_release+0x7d/0xa0 drivers/net/wireless/purelifi/plfxlc/mac.c:106Call Trace: <TASK> probe+0x941/0xbd0 drivers/net/wireless/purelifi/plfxlc/usb.c:694 usb_probe_interface+0x5c0/0xaf0 drivers/usb/core/driver.c:396 really_probe+0x2ab/0xcb0 drivers/base/dd.c:639 __driver_probe_device+0x1a2/0x3d0 drivers/base/dd.c:785 driver_probe_device+0x50/0x420 drivers/base/dd.c:815 __device_attach_driver+0x2cf/0x510 drivers/base/dd.c:943 bus_for_each_drv+0x183/0x200 drivers/base/bus.c:429 __device_attach+0x359/0x570 drivers/base/dd.c:1015 bus_probe_device+0xba/0x1e0 drivers/base/bus.c:489 device_add+0xb48/0xfd0 drivers/base/core.c:3696 usb_set_configuration+0x19dd/0x2020 drivers/usb/core/message.c:2165 usb_generic_driver_probe+0x84/0x140 drivers/usb/core/generic.c:238 usb_probe_device+0x130/0x260 drivers/usb/core/driver.c:293 really_probe+0x2ab/0xcb0 drivers/base/dd.c:639 __driver_probe_device+0x1a2/0x3d0 drivers/base/dd.c:785 driver_probe_device+0x50/0x420 drivers/base/dd.c:815 __device_attach_driver+0x2cf/0x510 drivers/base/dd.c:943 bus_for_each_drv+0x183/0x200 drivers/base/bus.c:429 __device_attach+0x359/0x570 drivers/base/dd.c:1015 bus_probe_device+0xba/0x1e0 drivers/base/bus.c:489 device_add+0xb48/0xfd0 drivers/base/core.c:3696 usb_new_device+0xbdd/0x18f0 drivers/usb/core/hub.c:2620 hub_port_connect drivers/usb/core/hub.c:5477 [inline] hub_port_connect_change drivers/usb/core/hub.c:5617 [inline] port_event drivers/usb/core/hub.c:5773 [inline] hub_event+0x2efe/0x5730 drivers/usb/core/hub.c:5855 process_one_work+0x8a9/0x11d0 kernel/workqueue.c:2292 worker_thread+0xa47/0x1200 kernel/workqueue.c:2439 kthread+0x28d/0x320 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295 </TASK>================================================================Found by Linux Verification Center (linuxtesting.org) with Syzkaller.
 漏洞公开时间：2025-05-21 00:15:26
 漏洞创建时间：2025-05-21 00:51:33
 漏洞详情参考链接：
  https://nvd.nist.gov/vuln/detail/CVE-2025-37897
<details>
<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |
| ------- | -------- | -------- |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/0fb15ae3b0a9221be01715dac0335647c79f3362 |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/36a9a2647810e57e704dde59abdf831380ca9102 |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/791a2d9e87c411aec0b9b2fb735fd15e48af9de9 |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/93d646911be1e5be20d4f5d6c48359464cef0097 |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/9ecb4af39f80cdda3e57825923243ec11e48be6b |  |
| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2025-37897 | https://bugzilla.suse.com/show_bug.cgi?id=1243534 |
| suse_bugzilla | https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2025/CVE-2025-37897.mbox | https://bugzilla.suse.com/show_bug.cgi?id=1243534 |
| suse_bugzilla | https://git.kernel.org/stable/c/93d646911be1e5be20d4f5d6c48359464cef0097 | https://bugzilla.suse.com/show_bug.cgi?id=1243534 |
| suse_bugzilla | https://git.kernel.org/stable/c/36a9a2647810e57e704dde59abdf831380ca9102 | https://bugzilla.suse.com/show_bug.cgi?id=1243534 |
| suse_bugzilla | https://git.kernel.org/stable/c/791a2d9e87c411aec0b9b2fb735fd15e48af9de9 | https://bugzilla.suse.com/show_bug.cgi?id=1243534 |
| suse_bugzilla | https://git.kernel.org/stable/c/9ecb4af39f80cdda3e57825923243ec11e48be6b | https://bugzilla.suse.com/show_bug.cgi?id=1243534 |
| suse_bugzilla | https://git.kernel.org/stable/c/0fb15ae3b0a9221be01715dac0335647c79f3362 | https://bugzilla.suse.com/show_bug.cgi?id=1243534 |
| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2025-37897 | https://bugzilla.suse.com/show_bug.cgi?id=1243534 |
| suse_bugzilla | https://bugzilla.redhat.com/show_bug.cgi?id=2367519 | https://bugzilla.suse.com/show_bug.cgi?id=1243534 |
| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2025052054-CVE-2025-37897-3146@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2367519 |
| anolis |  | https://anas.openanolis.cn/cves/detail/CVE-2025-37897 |

</details>

漏洞分析指导链接：
  https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
 漏洞数据来源:
  openBrain开源漏洞感知系统
 漏洞补丁信息：
  <details>
<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源  |
| ------- | -------- | ------- | -------- | --------- |
| linux_kernel | 6.1.138 | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=93d646911be1e5be20d4f5d6c48359464cef0097 | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=68d57a07bfe5bb29b80cd8b8fa24c9d1ea104124 | linuxkernelcves |
| linux_kernel | 6.6.90 | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=36a9a2647810e57e704dde59abdf831380ca9102 | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=68d57a07bfe5bb29b80cd8b8fa24c9d1ea104124 | linuxkernelcves |
| linux_kernel | 6.12.28 | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=791a2d9e87c411aec0b9b2fb735fd15e48af9de9 | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=68d57a07bfe5bb29b80cd8b8fa24c9d1ea104124 | linuxkernelcves |
| linux_kernel | 6.14.6 | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=9ecb4af39f80cdda3e57825923243ec11e48be6b | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=68d57a07bfe5bb29b80cd8b8fa24c9d1ea104124 | linuxkernelcves |
| linux_kernel | 6.15-rc5 | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=0fb15ae3b0a9221be01715dac0335647c79f3362 | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=68d57a07bfe5bb29b80cd8b8fa24c9d1ea104124 | linuxkernelcves |

</details>

二、漏洞分析结构反馈
 影响性分析说明：
  In the Linux kernel, the following vulnerability has been resolved:wifi: plfxlc: Remove erroneous assert in plfxlc_mac_releaseplfxlc_mac_release() asserts that mac-&gt;lock is held. This assertion isincorrect, because even if it was possible, it would not be the validbehaviour. The function is used when probe fails or after the device isdisconnected. In both cases mac-&gt;lock can not be held as the driver isnot working with the device at the moment. All functions that use mac-&gt;lockunlock it just after it was held. There is also no need to hold mac-&gt;lockfor plfxlc_mac_release() itself, as mac data is not affected, except formac-&gt;flags, which is modified atomically.This bug leads to the following warning:================================================================WARNING: CPU: 0 PID: 127 at drivers/net/wireless/purelifi/plfxlc/mac.c:106 plfxlc_mac_release+0x7d/0xa0Modules linked in:CPU: 0 PID: 127 Comm: kworker/0:2 Not tainted 6.1.124-syzkaller #0Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024Workqueue: usb_hub_wq hub_eventRIP: 0010:plfxlc_mac_release+0x7d/0xa0 drivers/net/wireless/purelifi/plfxlc/mac.c:106Call Trace: &lt;TASK&gt; probe+0x941/0xbd0 drivers/net/wireless/purelifi/plfxlc/usb.c:694 usb_probe_interface+0x5c0/0xaf0 drivers/usb/core/driver.c:396 really_probe+0x2ab/0xcb0 drivers/base/dd.c:639 __driver_probe_device+0x1a2/0x3d0 drivers/base/dd.c:785 driver_probe_device+0x50/0x420 drivers/base/dd.c:815 __device_attach_driver+0x2cf/0x510 drivers/base/dd.c:943 bus_for_each_drv+0x183/0x200 drivers/base/bus.c:429 __device_attach+0x359/0x570 drivers/base/dd.c:1015 bus_probe_device+0xba/0x1e0 drivers/base/bus.c:489 device_add+0xb48/0xfd0 drivers/base/core.c:3696 usb_set_configuration+0x19dd/0x2020 drivers/usb/core/message.c:2165 usb_generic_driver_probe+0x84/0x140 drivers/usb/core/generic.c:238 usb_probe_device+0x130/0x260 drivers/usb/core/driver.c:293 really_probe+0x2ab/0xcb0 drivers/base/dd.c:639 __driver_probe_device+0x1a2/0x3d0 drivers/base/dd.c:785 driver_probe_device+0x50/0x420 drivers/base/dd.c:815 __device_attach_driver+0x2cf/0x510 drivers/base/dd.c:943 bus_for_each_drv+0x183/0x200 drivers/base/bus.c:429 __device_attach+0x359/0x570 drivers/base/dd.c:1015 bus_probe_device+0xba/0x1e0 drivers/base/bus.c:489 device_add+0xb48/0xfd0 drivers/base/core.c:3696 usb_new_device+0xbdd/0x18f0 drivers/usb/core/hub.c:2620 hub_port_connect drivers/usb/core/hub.c:5477 [inline] hub_port_connect_change drivers/usb/core/hub.c:5617 [inline] port_event drivers/usb/core/hub.c:5773 [inline] hub_event+0x2efe/0x5730 drivers/usb/core/hub.c:5855 process_one_work+0x8a9/0x11d0 kernel/workqueue.c:2292 worker_thread+0xa47/0x1200 kernel/workqueue.c:2439 kthread+0x28d/0x320 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295 &lt;/TASK&gt;================================================================Found by Linux Verification Center (linuxtesting.org) with Syzkaller.The Linux kernel CVE team has assigned CVE-2025-37897 to this issue.
 openEuler评分：
  3.9
 Vector：CVSS：3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L
 受影响版本排查(受影响/不受影响)：
  1.master:不受影响
2.openEuler-20.03-LTS-SP4:不受影响
3.openEuler-22.03-LTS-SP3(5.10.0):不受影响
4.openEuler-22.03-LTS-SP4(5.10.0):不受影响
5.openEuler-24.03-LTS(6.6.0):不受影响
6.openEuler-24.03-LTS-Next(6.6.0):不受影响
7.openEuler-24.03-LTS-SP1(6.6.0):不受影响
8.openEuler-24.03-LTS-SP2(6.6.0):不受影响

修复是否涉及abi变化(是/否)：
  1.master:否
2.openEuler-20.03-LTS-SP4:否
3.openEuler-22.03-LTS-SP3(5.10.0):否
4.openEuler-22.03-LTS-SP4(5.10.0):否
5.openEuler-24.03-LTS(6.6.0):否
6.openEuler-24.03-LTS-Next(6.6.0):否
7.openEuler-24.03-LTS-SP1(6.6.0):否
8.openEuler-24.03-LTS-SP2(6.6.0):否

原因说明：
  1.openEuler-24.03-LTS(6.6.0):不受影响-组件不存在
2.openEuler-24.03-LTS-SP1(6.6.0):不受影响-组件不存在
3.openEuler-24.03-LTS-SP2(6.6.0):不受影响-组件不存在
4.master:不受影响-漏洞代码不能被攻击者触发
5.openEuler-24.03-LTS-Next(6.6.0):不受影响-漏洞代码不能被攻击者触发
6.openEuler-20.03-LTS-SP4:不受影响-漏洞代码不存在
7.openEuler-22.03-LTS-SP3(5.10.0):不受影响-漏洞代码不存在
8.openEuler-22.03-LTS-SP4(5.10.0):不受影响-漏洞代码不存在

src-openEuler/kernel
关闭

内容风险标识

评论 (5)

src-openEuler/kernel关闭 .gitee-modal { width: 500px !important; }

内容风险标识

CVE-2025-37897

评论 (5)

搜索帮助

src-openEuler/kernel
关闭