CVE-2025-37981: 
Linux Kernel vulnerability analysis and mitigation

CVE-2025-37981 is a vulnerability discovered in the Linux kernel's smartpqi driver, disclosed on May 20, 2025. The vulnerability affects the handling of kdump operations in the Linux kernel, specifically involving the smartpqi driver's interaction with system memory during kexec operations (NVD).

The vulnerability stems from the smartpqi driver incorrectly checking the resetdevices variable to determine whether special adjustments need to be made for kdump. This implementation causes driver parameters such as maxtransfer_size to be set much lower than intended after a regular kexec reboot. The issue has been assigned a CVSS 3.1 score vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H by Red Hat, indicating a moderate severity level (Red Hat).

The vulnerability affects system stability and performance in two primary ways: it causes driver parameters to be incorrectly set at lower values than intended during normal operation, and more critically, it can lead to memory corruption when the driver log is written to system memory following a kexec operation (Wiz).

The vulnerability has been resolved by modifying the smartpqi driver to use iskdumpkernel() instead of checking the reset_devices variable where appropriate. This change ensures proper handling of driver parameters during both normal operations and kdump scenarios (NVD).