Denial of Service in Linux Kernel Due to Generic PHY LED Registration
CVE-2025-38537

Currently unrated

Key Information:

Vendor: Linux
Status: Linux
Vendor: CVE Published:; 16 August 2025

What is CVE-2025-38537?

A significant vulnerability affecting the Linux kernel has been identified regarding LED registration for generic PHYs. When a generic PHY does not have an associated driver, it may trigger a deadlock when probing or removing the genphy driver. This occurs because LEDs associated with a non-generic driver are incorrectly registered or unregistered, leading to a situation where kernel threads are unable to proceed, ultimately causing a denial of service. This issue emphasizes the importance of ensuring that generic PHYs do not involve unnecessary LED registrations, as they do not inherently support such features.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch