CVE-2025-37876

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

netfs: Only create /proc/fs/netfs with CONFIG_PROC_FS

When testing a special config:

CONFIG_NETFS_SUPPORTS=y

CONFIG_PROC_FS=n

The system crashes with something like:

[ 3.766197] ------------[ cut here ]------------

[ 3.766484] kernel BUG at mm/mempool.c:560!

[ 3.766789] Oops: invalid opcode: 0000 [#1] SMP NOPTI

[ 3.767123] CPU: 0 UID: 0 PID: 1 Comm: swapper/0 Tainted: G W

[ 3.767777] Tainted: [W]=WARN

[ 3.767968] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996),

[ 3.768523] RIP: 0010:mempool_alloc_slab.cold+0x17/0x19

[ 3.768847] Code: 50 fe ff 58 5b 5d 41 5c 41 5d 41 5e 41 5f e9 93 95 13 00

[ 3.769977] RSP: 0018:ffffc90000013998 EFLAGS: 00010286

[ 3.770315] RAX: 000000000000002f RBX: ffff888100ba8640 RCX: 0000000000000000

[ 3.770749] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000ffffffff

[ 3.771217] RBP: 0000000000092880 R08: 0000000000000000 R09: ffffc900

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References