CVE-2025-37842

🗓️ 09 May 2025 06:41:51Reported by LinuxType

cve🔗 web.nvd.nist.gov👁 113 Views🌐 WEB

Fixed Linux kernel vulnerability CVE-2025-37842 to prevent kernel panic during device detach.

Reporter	Title	Published	Views	Family All 191
AstraLinux	Astra Linux – Vulnerability in Linux 6.12	1 Nov 202510:54	–	astralinux
BDU FSTEC	The vulnerability of the fsl_qspi_probe() function in the drivers/spi/spi-fsl-qspi.c file of the Linux kernel’s SPI device driver allows a hacker to cause a service failure.	23 Apr 202600:00	–	bdu_fstec
CBLMariner	CVE-2025-37842 affecting package kernel for versions less than 6.6.112.1-2	14 Nov 202522:03	–	cbl_mariner
Circl	CVE-2025-37842	3 Dec 202514:14	–	circl
CNNVD	Linux kernel 安全漏洞	9 May 202500:00	–	cnnvd
Cvelist	CVE-2025-37842 spi: fsl-qspi: use devm function instead of driver remove	9 May 202506:41	–	cvelist
Debian CVE	CVE-2025-37842	9 May 202506:41	–	debiancve
EUVD	EUVD-2025-14150	3 Oct 202520:07	–	euvd
Microsoft CVE	spi: fsl-qspi: use devm function instead of driver remove	4 Sep 202505:46	–	mscve
NVD	CVE-2025-37842	9 May 202507:16	–	nvd

NVD

Vulners

CNA

Node

linux linux_kernelRange5.2–6.6.105

linux linux_kernelRange6.7–6.12.36

linux linux_kernelRange6.13–6.13.12

linux linux_kernelRange6.14–6.14.3

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/spi/spi-fsl-qspi.c"
    ],
    "versions": [
      {
        "version": "8fcb830a00f0980ffe38d223cdd9a4d2d24da476",
        "lessThan": "50ae352c1848cab408fb4f7d7f50c71f818bbdbf",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "8fcb830a00f0980ffe38d223cdd9a4d2d24da476",
        "lessThan": "f68b27d82a749117d9c7d7f33fa53f46373e38e2",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "8fcb830a00f0980ffe38d223cdd9a4d2d24da476",
        "lessThan": "439688dbe82baa10d4430dc3252bb5ef1183a171",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "8fcb830a00f0980ffe38d223cdd9a4d2d24da476",
        "lessThan": "f9bfb3a5f6f616f3eb7665c8ff3bcb9760ae33c8",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "8fcb830a00f0980ffe38d223cdd9a4d2d24da476",
        "lessThan": "40369bfe717e96e26650eeecfa5a6363563df6e4",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/spi/spi-fsl-qspi.c"
    ],
    "versions": [
      {
        "version": "5.2",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "5.2",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.105",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.36",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.13.12",
        "lessThanOrEqual": "6.13.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.14.3",
        "lessThanOrEqual": "6.14.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.15",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/f68b27d82a749117d9c7d7f33fa53f46373e38e2
git	www.git.kernel.org/stable/c/f9bfb3a5f6f616f3eb7665c8ff3bcb9760ae33c8
git	www.git.kernel.org/stable/c/40369bfe717e96e26650eeecfa5a6363563df6e4
git	www.git.kernel.org/stable/c/439688dbe82baa10d4430dc3252bb5ef1183a171
git	www.git.kernel.org/stable/c/50ae352c1848cab408fb4f7d7f50c71f818bbdbf

Parameter	Position	Path	Description	CWE
30bb0000.spi	path	sys/bus/platform/drivers/fsl-quadspi/unbind	Trigger kernel panic by unbinding the fsl-quadspi driver via sysfs unbind path (i.MX8MQ) using an crafted device name.

17 Jun 2026 09:15Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.15.5

EPSS0.00229