Riskcovery

CVE-2025-37815

misc: microchip: pci1xxxx: Fix Kernel panic during IRQ handler registration

State
Published
Severity
Not scored
Published
May 8, 2025
Updated
May 23, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

misc: microchip: pci1xxxx: Fix Kernel panic during IRQ handler registration

Resolve kernel panic while accessing IRQ handler associated with the generated IRQ. This is done by acquiring the spinlock and storing the current interrupt state before handling the interrupt request using generic_handle_irq.

A previous fix patch was submitted where 'generic_handle_irq' was replaced with 'handle_nested_irq'. However, this change also causes the kernel panic where after determining which GPIO triggered the interrupt and attempting to call handle_nested_irq with the mapped IRQ number, leads to a failure in locating the registered handler.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 79aef6187e16b2d32307c8ff610e9e04f7f86e1f to before 1263d5f581908602c618c6665e683c4436383a09Affected
  • 25692750c0259c5b65afec467d97201a485e8a00 to before 62957f58ab3aa7fa792dc6ff3575624062539a4dAffected
  • 47d3749ec0cb56b7b98917c190a8c10cb54216fd to before 12cc2193f2b9548e8ea5fbce8201b44158222edfAffected
  • 194f9f94a5169547d682e9bbcc5ae6d18a564735 to before 4e02059dc91068bc5017b8546f9ec3b930f6d6a6Affected
  • 194f9f94a5169547d682e9bbcc5ae6d18a564735 to before 18eb77c75ed01439f96ae5c0f33461eb5134b907Affected
  • 6.1.125 to before 6.1.136Affected
  • 6.6.72 to before 6.6.89Affected
  • 6.12.10 to before 6.12.26Affected
LinuxLinux
  • 6.13Affected
  • before 6.13Not affected
  • 6.1.136 through 6.1.*Not affected
  • 6.6.89 through 6.6.*Not affected
  • 6.12.26 through 6.12.*Not affected
  • 6.14.5 through 6.14.*Not affected
  • 6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.