Answer in brief
CVE-2025-37933 records a Medium severity (CVSS 5.5) vulnerability in octeon_ep: Fix host hang issue during device reboot. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 5.5. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Product | Affected versions | Fixed versions |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:* | Not reported | Not reported |
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=5cb96c29aa0ea359e4f5d30585538dc6a847d69d <7e1ca1bed3f66e00377f7d2147be390144924276 || >=5cb96c29aa0ea359e4f5d30585538dc6a847d69d <c8d788f800f83b94d9db8b3dacc1d26be38a6ef4 || >=5cb96c29aa0ea359e4f5d30585538dc6a847d69d <6d1052423518e7d0aece9af5e77bbc324face8f1 || >=5cb96c29aa0ea359e4f5d30585538dc6a847d69d <34f42736b325287a7b2ce37e415838f539767bda | 7e1ca1bed3f66e00377f7d2147be390144924276, c8d788f800f83b94d9db8b3dacc1d26be38a6ef4, 6d1052423518e7d0aece9af5e77bbc324face8f1, 34f42736b325287a7b2ce37e415838f539767bda |
| Linux/Linuxgeneric | 6.4 | Not reported |
Published upstream
May 20, 2025
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Nov 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Nov 5, 2026
In the Linux kernel, the following vulnerability has been resolved: octeon_ep: Fix host hang issue during device reboot When the host loses heartbeat messages from the device, the driver calls the device-specific ndo_stop function, which frees the resources. If the driver is unloaded in this scenario, it calls ndo_stop again, attempting to free resources that have already been freed, leading to a host hang issue. To resolve this, dev_close should be called instead of the device-specific stop function.dev_close internally calls ndo_stop to stop the network interface and performs additional cleanup tasks. During the driver unload process, if the device is already down, ndo_stop is not called.
Quoted source text, attributed separately from HOL analysis.