Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2025-37901— irqchip/qcom-mpm: Prevent crash when trying to handle non-wake GPIOs

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于irqchip/qcom-mpm未处理非唤醒GPIO情况，可能导致内核崩溃。

CVSS 7.8 · High EPSS 0.21% · P10

Possible ATT&CK Techniques 1 AI

T1498.001 · Direct Network Flood

Affected Version Matrix 12

VendorProduct Version RangeStatus
Linux Linux a6199bb514d8a63f61c2a22c1f912376e14d0fb2< 45aced97f01d5ab14c8a2a60f6748f18c501c3f5 affected
a6199bb514d8a63f61c2a22c1f912376e14d0fb2< dfbaecf7e38f5e9bfa5e47a1e525ffbb58bab8cf affected
a6199bb514d8a63f61c2a22c1f912376e14d0fb2< f102342360950b56959e5fff4a874ea88ae13758 affected
a6199bb514d8a63f61c2a22c1f912376e14d0fb2< d5c10448f411a925dd59005785cb971f0626e032 affected
a6199bb514d8a63f61c2a22c1f912376e14d0fb2< 38a05c0b87833f5b188ae43b428b1f792df2b384 affected
5.18 affected
< 5.18 unaffected
6.1.138≤ 6.1.* unaffected
… +4 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-37901

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
irqchip/qcom-mpm: Prevent crash when trying to handle non-wake GPIOs
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: irqchip/qcom-mpm: Prevent crash when trying to handle non-wake GPIOs On Qualcomm chipsets not all GPIOs are wakeup capable. Those GPIOs do not have a corresponding MPM pin and should not be handled inside the MPM driver. The IRQ domain hierarchy is always applied, so it's required to explicitly disconnect the hierarchy for those. The pinctrl-msm driver marks these with GPIO_NO_WAKE_IRQ. qcom-pdc has a check for this, but irq-qcom-mpm is currently missing the check. This is causing crashes when setting up interrupts for non-wake GPIOs: root@rb1:~# gpiomon -c gpiochip1 10 irq: IRQ159: trimming hierarchy from :soc@0:interrupt-controller@f200000-1 Unable to handle kernel paging request at virtual address ffff8000a1dc3820 Hardware name: Qualcomm Technologies, Inc. Robotics RB1 (DT) pc : mpm_set_type+0x80/0xcc lr : mpm_set_type+0x5c/0xcc Call trace: mpm_set_type+0x80/0xcc (P) qcom_mpm_set_type+0x64/0x158 irq_chip_set_type_parent+0x20/0x38 msm_gpio_irq_set_type+0x50/0x530 __irq_set_trigger+0x60/0x184 __setup_irq+0x304/0x6bc request_threaded_irq+0xc8/0x19c edge_detector_setup+0x260/0x364 linereq_create+0x420/0x5a8 gpio_ioctl+0x2d4/0x6c0 Fix this by copying the check for GPIO_NO_WAKE_IRQ from qcom-pdc.c, so that MPM is removed entirely from the hierarchy for non-wake GPIOs.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于irqchip/qcom-mpm未处理非唤醒GPIO情况，可能导致内核崩溃。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux a6199bb514d8a63f61c2a22c1f912376e14d0fb2 ~ 45aced97f01d5ab14c8a2a60f6748f18c501c3f5 -
Linux Linux 5.18 -

II. Public POCs for CVE-2025-37901

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-37901

请登录查看更多情报信息。

Same Patch Batch · Linux · 2025-05-20 · 95 CVEs total

CVE-2025-37894 9.8 CRITICAL net: use sock_gen_put() when sk_state is TCP_TIME_WAIT
CVE-2025-37924 9.8 CRITICAL ksmbd: fix use-after-free in kerberos authentication
CVE-2025-37935 9.8 CRITICAL net: ethernet: mtk_eth_soc: fix SER panic with 4GB+ RAM
CVE-2025-37959 9.4 CRITICAL bpf: Scrub packet on bpf_redirect_peer
CVE-2025-37926 8.8 HIGH ksmbd: fix use-after-free in ksmbd_session_rpc_open
CVE-2025-37899 8.8 HIGH ksmbd: fix use-after-free in session logoff
CVE-2025-37918 8.8 HIGH Bluetooth: btusb: avoid NULL pointer dereference in skb_dequeue()
CVE-2025-37944 8.8 HIGH wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process
CVE-2025-37943 8.8 HIGH wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi
CVE-2025-37947 8.8 HIGH ksmbd: prevent out-of-bounds stream writes by validating *pos
CVE-2025-37952 8.8 HIGH ksmbd: Fix UAF in __close_file_table_ids
CVE-2025-37956 8.8 HIGH ksmbd: prevent rename with empty string
CVE-2025-37957 8.8 HIGH KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception
CVE-2025-37936 8.7 HIGH perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value.
CVE-2025-37973 8.1 HIGH wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation
CVE-2025-37979 7.8 HIGH ASoC: qcom: Fix sc7280 lpass potential buffer overflow
CVE-2025-37903 7.8 HIGH drm/amd/display: Fix slab-use-after-free in hdcp
CVE-2025-37923 7.8 HIGH tracing: Fix oob write in trace_seq_to_buffer()
CVE-2025-37921 7.8 HIGH vxlan: vnifilter: Fix unlocked deletion of default FDB entry
CVE-2025-37920 7.8 HIGH xsk: Fix race condition in AF_XDP generic RX path

Showing top 20 of 95 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2025-37901

No comments yet

Leave a comment