CVE-2025-37756: linux kernel from 4.13 (inclusive), before 5.10.237 (exclusive), from 5.11 (inclusive), before 5.15.181 (exclusive)…

Affected technology

linux kernel · from 4.13 (inclusive), before 5.10.237 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.181 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.135 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.88 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.24 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.13.12 (exclusive)
linux

linux kernel · from 6.14 (inclusive), before 6.14.3 (exclusive)
linux

linux kernel · 6.15 · update rc1
linux

debian linux · 11.0
debian

Linux · 3c4d7559159bfe1e3b94df3a657b2cda3a34e218 to before 7bdcf5bc35ae59fc4a0fa23276e84b4d1534a3cf, 3c4d7559159bfe1e3b94df3a657b2cda3a34e218 to before ac91c6125468be720eafde9c973994cb45b61d44, 3c4d7559159bfe1e3b94df3a657b2cda3a34e218 to before f3ce4d3f874ab7919edca364c147ac735f9f1d04, 3c4d7559159bfe1e3b94df3a657b2cda3a34e218 to before 2bcad8fefcecdd5f005d8c550b25d703c063c34a, 3c4d7559159bfe1e3b94df3a657b2cda3a34e218 to before 9fcbca0f801580cbb583e9cb274e2c7fbe766ca6, 3c4d7559159bfe1e3b94df3a657b2cda3a34e218 to before c665bef891e8972e1d3ce5bbc0d42a373346a2c3, 3c4d7559159bfe1e3b94df3a657b2cda3a34e218 to before 8513411ec321942bd3cfed53d5bb700665c67d86, 3c4d7559159bfe1e3b94df3a657b2cda3a34e218 to before 5071a1e606b30c0c11278d3c6620cd6a24724cf6
Linux

Linux · 4.13
Linux

Component: Not specified by the source
File: net/tls/tls_main.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.