CVE-2025-37843 is a medium-severity vulnerability in the Linux kernel's PCI hotplug (pciehp) subsystem. It involves a race condition during hot-removal of nested PCI hotplug ports that can cause a deadlock. The issue arises when a parent hotplug port holds a lock and waits for a child port to unbind, while the child simultaneously tries to acquire the same lock to remove its children. This deadlock is triggered more frequently by a recent kernel commit related to device replacement detection during system sleep. The fix avoids unnecessary device replacement checks when a hotplug port itself was removed, preventing the deadlock scenario.