Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2025-37897— wifi: plfxlc: Remove erroneous assert in plfxlc_mac_release

Quick assessment

Affected

Linux Linux

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于plfxlc_mac_release函数中错误断言mac->lock被持有，可能导致内核警告。

AI Predicted 4.3 Difficulty: Easy EPSS 0.20% · P10 Updated May 13, 2026

Possible ATT&CK Techniques 2 AI

T1059 · Command and Scripting Interpreter T1211 · Exploitation for Stealth

Affected Version Matrix 12

Vendor	Product	Version Range	Status
Linux	Linux	`68d57a07bfe5bb29b80cd8b8fa24c9d1ea104124< 93d646911be1e5be20d4f5d6c48359464cef0097`	affected
		`68d57a07bfe5bb29b80cd8b8fa24c9d1ea104124< 36a9a2647810e57e704dde59abdf831380ca9102`	affected
		`68d57a07bfe5bb29b80cd8b8fa24c9d1ea104124< 791a2d9e87c411aec0b9b2fb735fd15e48af9de9`	affected
		`68d57a07bfe5bb29b80cd8b8fa24c9d1ea104124< 9ecb4af39f80cdda3e57825923243ec11e48be6b`	affected
		`68d57a07bfe5bb29b80cd8b8fa24c9d1ea104124< 0fb15ae3b0a9221be01715dac0335647c79f3362`	affected
		`5.19`	affected
		`< 5.19`	unaffected
		`6.1.138≤ 6.1.*`	unaffected
… +4 more rows

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-37897

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

wifi: plfxlc: Remove erroneous assert in plfxlc_mac_release

Source: CVE Program / CVE List V5

Vulnerability Description

In the Linux kernel, the following vulnerability has been resolved: wifi: plfxlc: Remove erroneous assert in plfxlc_mac_release plfxlc_mac_release() asserts that mac->lock is held. This assertion is incorrect, because even if it was possible, it would not be the valid behaviour. The function is used when probe fails or after the device is disconnected. In both cases mac->lock can not be held as the driver is not working with the device at the moment. All functions that use mac->lock unlock it just after it was held. There is also no need to hold mac->lock for plfxlc_mac_release() itself, as mac data is not affected, except for mac->flags, which is modified atomically. This bug leads to the following warning: ================================================================ WARNING: CPU: 0 PID: 127 at drivers/net/wireless/purelifi/plfxlc/mac.c:106 plfxlc_mac_release+0x7d/0xa0 Modules linked in: CPU: 0 PID: 127 Comm: kworker/0:2 Not tainted 6.1.124-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 Workqueue: usb_hub_wq hub_event RIP: 0010:plfxlc_mac_release+0x7d/0xa0 drivers/net/wireless/purelifi/plfxlc/mac.c:106 Call Trace: <TASK> probe+0x941/0xbd0 drivers/net/wireless/purelifi/plfxlc/usb.c:694 usb_probe_interface+0x5c0/0xaf0 drivers/usb/core/driver.c:396 really_probe+0x2ab/0xcb0 drivers/base/dd.c:639 __driver_probe_device+0x1a2/0x3d0 drivers/base/dd.c:785 driver_probe_device+0x50/0x420 drivers/base/dd.c:815 __device_attach_driver+0x2cf/0x510 drivers/base/dd.c:943 bus_for_each_drv+0x183/0x200 drivers/base/bus.c:429 __device_attach+0x359/0x570 drivers/base/dd.c:1015 bus_probe_device+0xba/0x1e0 drivers/base/bus.c:489 device_add+0xb48/0xfd0 drivers/base/core.c:3696 usb_set_configuration+0x19dd/0x2020 drivers/usb/core/message.c:2165 usb_generic_driver_probe+0x84/0x140 drivers/usb/core/generic.c:238 usb_probe_device+0x130/0x260 drivers/usb/core/driver.c:293 really_probe+0x2ab/0xcb0 drivers/base/dd.c:639 __driver_probe_device+0x1a2/0x3d0 drivers/base/dd.c:785 driver_probe_device+0x50/0x420 drivers/base/dd.c:815 __device_attach_driver+0x2cf/0x510 drivers/base/dd.c:943 bus_for_each_drv+0x183/0x200 drivers/base/bus.c:429 __device_attach+0x359/0x570 drivers/base/dd.c:1015 bus_probe_device+0xba/0x1e0 drivers/base/bus.c:489 device_add+0xb48/0xfd0 drivers/base/core.c:3696 usb_new_device+0xbdd/0x18f0 drivers/usb/core/hub.c:2620 hub_port_connect drivers/usb/core/hub.c:5477 [inline] hub_port_connect_change drivers/usb/core/hub.c:5617 [inline] port_event drivers/usb/core/hub.c:5773 [inline] hub_event+0x2efe/0x5730 drivers/usb/core/hub.c:5855 process_one_work+0x8a9/0x11d0 kernel/workqueue.c:2292 worker_thread+0xa47/0x1200 kernel/workqueue.c:2439 kthread+0x28d/0x320 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295 </TASK> ================================================================ Found by Linux Verification Center (linuxtesting.org) with Syzkaller.

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

N/A

Source: CVE Program / CVE List V5

Vulnerability Title

Linux kernel 安全漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Linux	Linux	68d57a07bfe5bb29b80cd8b8fa24c9d1ea104124 ~ 93d646911be1e5be20d4f5d6c48359464cef0097	-
Linux	Linux	5.19	-

II. Public POCs for CVE-2025-37897

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2025-37897

请登录查看更多情报信息。

https://www.cve.org/CVERecord?id=CVE-2025-37897

Same Patch Batch · Linux · 2025-05-20 · 95 CVEs total

CVE-2025-37894	9.8 CRITICAL	net: use sock_gen_put() when sk_state is TCP_TIME_WAIT
CVE-2025-37924	9.8 CRITICAL	ksmbd: fix use-after-free in kerberos authentication
CVE-2025-37935	9.8 CRITICAL	net: ethernet: mtk_eth_soc: fix SER panic with 4GB+ RAM
CVE-2025-37959	9.4 CRITICAL	bpf: Scrub packet on bpf_redirect_peer
CVE-2025-37926	8.8 HIGH	ksmbd: fix use-after-free in ksmbd_session_rpc_open
CVE-2025-37899	8.8 HIGH	ksmbd: fix use-after-free in session logoff
CVE-2025-37918	8.8 HIGH	Bluetooth: btusb: avoid NULL pointer dereference in skb_dequeue()
CVE-2025-37944	8.8 HIGH	wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process
CVE-2025-37943	8.8 HIGH	wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi
CVE-2025-37947	8.8 HIGH	ksmbd: prevent out-of-bounds stream writes by validating *pos
CVE-2025-37952	8.8 HIGH	ksmbd: Fix UAF in __close_file_table_ids
CVE-2025-37956	8.8 HIGH	ksmbd: prevent rename with empty string
CVE-2025-37957	8.8 HIGH	KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception
CVE-2025-37936	8.7 HIGH	perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value.
CVE-2025-37973	8.1 HIGH	wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation
CVE-2025-37921	7.8 HIGH	vxlan: vnifilter: Fix unlocked deletion of default FDB entry
CVE-2025-37964	7.8 HIGH	x86/mm: Eliminate window where TLB flushes may be inadvertently skipped
CVE-2025-37923	7.8 HIGH	tracing: Fix oob write in trace_seq_to_buffer()
CVE-2025-37977	7.8 HIGH	scsi: ufs: exynos: Disable iocc if dma-coherent property isn't set
CVE-2025-37920	7.8 HIGH	xsk: Fix race condition in AF_XDP generic RX path

Showing top 20 of 95 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: Linux

Same vendor: Linux