CVE-2025-37757: linux kernel from 4.11 (inclusive), before 5.4.293 (exclusive), from 5.5 (inclusive), before 5.10.237 (exclusive)…

Affected technology

linux kernel · from 4.11 (inclusive), before 5.4.293 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.237 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.181 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.135 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.88 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.24 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.13.12 (exclusive)
linux

linux kernel · from 6.14 (inclusive), before 6.14.3 (exclusive)
linux

linux kernel · 6.15 · update rc1
linux

debian linux · 11.0
debian

Linux · 365ad353c2564bba8835290061308ba825166b3a to before 84895f5ce3829d9fc030e5ec2d8729da4c0c9d08, 365ad353c2564bba8835290061308ba825166b3a to before d4d40e437adb376be16b3a12dd5c63f0fa768247, 365ad353c2564bba8835290061308ba825166b3a to before ed06675d3b8cd37120b447646d53f7cd3e6fcd63, 365ad353c2564bba8835290061308ba825166b3a to before 24e6280cdd7f8d01fc6b9b365fb800c2fb7ea9bb, 365ad353c2564bba8835290061308ba825166b3a to before 09c2dcda2c551bba30710c33f6ac678ae7395389, 365ad353c2564bba8835290061308ba825166b3a to before 7c5957f7905b4aede9d7a559d271438f3ca9e852, 365ad353c2564bba8835290061308ba825166b3a to before d0e02d3d27a0b4dcb13f954f537ca1dd8f282dcf, 365ad353c2564bba8835290061308ba825166b3a to before a40cbfbb8f95c325430f017883da669b2aa927d4, 365ad353c2564bba8835290061308ba825166b3a to before 69ae94725f4fc9e75219d2d69022029c5b24bc9a
Linux

Linux · 4.11
Linux

Component: Not specified by the source
File: net/tipc/link.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.