VDB

CVE-2025-37815

CVE-2025-37815 PUBLISHED

misc: microchip: pci1xxxx: Fix Kernel panic during IRQ handler registration

Reported by linux · Published May 8, 2025

In the Linux kernel, the following vulnerability has been resolved: misc: microchip: pci1xxxx: Fix Kernel panic during IRQ handler registration Resolve kernel panic while accessing IRQ handler associated with the generated IRQ. This is done by acquiring the spinlock and storing the current interrupt state before handling the interrupt request using generic_handle_irq. A previous fix patch was submitted where 'generic_handle_irq' was replaced with 'handle_nested_irq'. However, this change also causes the kernel panic where after determining which GPIO triggered the interrupt and attempting to call handle_nested_irq with the mapped IRQ number, leads to a failure in locating the registered handler.

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
linux_kernellinux6.14.5, 6.12.26, 6.6.89, 6.1.136

Affected products

VendorProductVersions
LinuxLinux79aef6187e16b2d32307c8ff610e9e04f7f86e1f, 25692750c0259c5b65afec467d97201a485e8a00, 47d3749ec0cb56b7b98917c190a8c10cb54216fd
LinuxLinux6.13, 0, 6.1.136
linuxlinux_kernel6.1.125, 6.6.72, 6.12.10
LinuxLinux79aef6187e16b2d32307c8ff610e9e04f7f86e1f, 25692750c0259c5b65afec467d97201a485e8a00, 47d3749ec0cb56b7b98917c190a8c10cb54216fd

Timeline

  • May 8, 2025 EPSS Score (30 in total, the first dated here)
  • May 8, 2025 CVE Published
  • Oct 12, 2025 PoC Published (5 in total, the first dated here)
  • Mar 29, 2026 Distribution Patch (80 in total, the first dated here)
  • Mar 29, 2026 Security Advisory (82 in total, the first dated here)
  • Jun 9, 2026 Coalition ESS Score

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2025-37815
vulnetix vdb fixes CVE-2025-37815

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2025-37815/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›