Close Menu
    DevStackTipsDevStackTips
    • Home
    • News & Updates
      1. Tech & Work
      2. View All

      In-House vs Outsourcing for React.js Development: Understand What Is Best for Your Enterprise

      July 17, 2025

      Tiny Screens, Big Impact: The Forgotten Art Of Developing Web Apps For Feature Phones

      July 16, 2025

      Kong AI Gateway 3.11 introduces new method for reducing token costs

      July 16, 2025

      Native vs hybrid vs cross-platform: Resolving the trilemma

      July 16, 2025

      Microsoft’s AI CEO says Google nearly launched “ChatGPT” before OpenAI — but brutal skeptics, fears of disrupting search, and safety concerns thwarted the plan

      July 17, 2025

      You’ve got to try these 5 premium Minecraft add-ons — Dinosaurs, security systems, and more really shake up Bedrock Edition

      July 17, 2025

      This Microsoft pay scale reveals AI pros are making bank — with compensation packages reaching up to $336,000/year

      July 17, 2025

      ZeniMax QA testers face whiplash and “rancid” work morale following Microsoft’s gaming layoffs — but the union still fights

      July 17, 2025
    • Development
      1. Algorithms & Data Structures
      2. Artificial Intelligence
      3. Back-End Development
      4. Databases
      5. Front-End Development
      6. Libraries & Frameworks
      7. Machine Learning
      8. Security
      9. Software Engineering
      10. Tools & IDEs
      11. Web Design
      12. Web Development
      13. Web Security
      14. Programming Languages
        • PHP
        • JavaScript
      Featured

      The details of TC39’s last meeting

      July 17, 2025
      Recent

      The details of TC39’s last meeting

      July 17, 2025

      Vector Search Embeddings and RAG

      July 16, 2025

      Python Meets Power Automate: Trigger via URL

      July 16, 2025
    • Operating Systems
      1. Windows
      2. Linux
      3. macOS
      Featured

      Microsoft’s AI CEO says Google nearly launched “ChatGPT” before OpenAI — but brutal skeptics, fears of disrupting search, and safety concerns thwarted the plan

      July 17, 2025
      Recent

      Microsoft’s AI CEO says Google nearly launched “ChatGPT” before OpenAI — but brutal skeptics, fears of disrupting search, and safety concerns thwarted the plan

      July 17, 2025

      You’ve got to try these 5 premium Minecraft add-ons — Dinosaurs, security systems, and more really shake up Bedrock Edition

      July 17, 2025

      This Microsoft pay scale reveals AI pros are making bank — with compensation packages reaching up to $336,000/year

      July 17, 2025
    • Learning Resources
      • Books
      • Cheatsheets
      • Tutorials & Guides
    Home»Security»Common Vulnerabilities and Exposures (CVEs)»CVE-2025-37993 – Linux Kernel: CAN: Uninitialized Spin Lock in m_can_class_allocate_dev

    CVE-2025-37993 – Linux Kernel: CAN: Uninitialized Spin Lock in m_can_class_allocate_dev

    May 29, 2025

    CVE ID : CVE-2025-37993

    Published : May 29, 2025, 2:15 p.m. | 2 hours, 47 minutes ago

    Description : In the Linux kernel, the following vulnerability has been resolved:

    can: m_can: m_can_class_allocate_dev(): initialize spin lock on device probe

    The spin lock tx_handling_spinlock in struct m_can_classdev is not
    being initialized. This leads the following spinlock bad magic
    complaint from the kernel, eg. when trying to send CAN frames with
    cansend from can-utils:

    | BUG: spinlock bad magic on CPU#0, cansend/95
    | lock: 0xff60000002ec1010, .magic: 00000000, .owner: /-1, .owner_cpu: 0
    | CPU: 0 UID: 0 PID: 95 Comm: cansend Not tainted 6.15.0-rc3-00032-ga79be02bba5c #5 NONE
    | Hardware name: MachineWare SIM-V (DT)
    | Call Trace:
    | [] dump_backtrace+0x1c/0x24
    | [] show_stack+0x28/0x34
    | [] dump_stack_lvl+0x4a/0x68
    | [] dump_stack+0x14/0x1c
    | [] spin_dump+0x62/0x6e
    | [] do_raw_spin_lock+0xd0/0x142
    | [] _raw_spin_lock_irqsave+0x20/0x2c
    | [] m_can_start_xmit+0x90/0x34a
    | [] dev_hard_start_xmit+0xa6/0xee
    | [] sch_direct_xmit+0x114/0x292
    | [] __dev_queue_xmit+0x3b0/0xaa8
    | [] can_send+0xc6/0x242
    | [] raw_sendmsg+0x1a8/0x36c
    | [] sock_write_iter+0x9a/0xee
    | [] vfs_write+0x184/0x3a6
    | [] ksys_write+0xa0/0xc0
    | [] __riscv_sys_write+0x14/0x1c
    | [] do_trap_ecall_u+0x168/0x212
    | [] handle_exception+0x146/0x152

    Initializing the spin lock in m_can_class_allocate_dev solves that
    problem.

    Severity: 0.0 | NA

    Visit the link for more details, such as CVSS details, affected products, timeline, and more…

    Source: Read More

    Facebook Twitter Reddit Email Copy Link
    Previous ArticleCVE-2025-37994 – “Linux Kernel USB TypeC UCSI NULL Pointer Access Vulnerability”
    Next Article CVE-2025-33043 – APTIOV BIOS Improper Input Validation Vulnerability

    Related Posts

    Development

    Critical mcp-remote Vulnerability Enables Remote Code Execution, Impacting 437,000+ Downloads

    July 17, 2025
    Development

    CISA Adds Citrix NetScaler CVE-2025-5777 to KEV Catalog as Active Exploits Target Enterprises

    July 17, 2025
    Leave A Reply Cancel Reply

    For security, use of Google's reCAPTCHA service is required which is subject to the Google Privacy Policy and Terms of Use.

    Continue Reading

    CVE-2025-49197 – Cisco FTP Weak Password Hash

    Common Vulnerabilities and Exposures (CVEs)

    Populate is a Supercharged Seeder for Laravel

    Development

    ASUS Armoury Crate Vulnerability Let Attackers Escalate to System User on Windows Machine

    Security

    Perficient Research Highlights the Path Forward for Connected Products

    Development

    Highlights

    Learning Resources

    The Secret Weapon Behind Successful Email Campaigns? Buy SMTP And Win Big!

    May 17, 2025

    Email marketing remains one of the most budget-friendly methods for engaging your target audience. However,…

    CVE-2025-45529 – SSCMS File Read Vulnerability

    May 27, 2025

    CVE-2025-5823 – Autel MaxiCharger AC Wallbox Commercial Exposed Dangerous Method Information Disclosure

    June 25, 2025

    CVE-2025-7141 – SourceCodester Best Salon Management System Cross Site Scripting Vulnerability

    July 7, 2025
    © DevStackTips 2025. All rights reserved.
    • Contact
    • Privacy Policy

    Type above and press Enter to search. Press Esc to cancel.