CVE-2025-37893

Summary

CVE-2025-37893 is a vulnerability affecting the Linux kernel on LoongArch processors. The issue stems from a mismatch between the number of instructions set in the first pass and the number generated in the second pass during JIT compiling of BPF programs. This discrepancy causes the epilogue offset to be off by one, resulting in a kernel hard lockup due to the processor jumping to an unexpected instruction. The vulnerability has been resolved by inserting a NOP instruction to align the insns and correct the off-by-one error in build_prologue().

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.