CVE-2025-37785: linux kernel from 2.6.19 (inclusive), before 5.10.236 (exclusive), from 5.11 (inclusive), before 5.15.180 (exclusive)…

Affected technology

linux kernel · from 2.6.19 (inclusive), before 5.10.236 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.180 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.134 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.87 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.23 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.13.11 (exclusive)
linux

linux kernel · from 6.14 (inclusive), before 6.14.2 (exclusive)
linux

Linux · ac27a0ec112a089f1a5102bc8dffc79c8c815571 to before 14da7dbecb430e35b5889da8dae7bef33173b351, ac27a0ec112a089f1a5102bc8dffc79c8c815571 to before e47f472a664d70a3d104a6c2a035cdff55a719b4, ac27a0ec112a089f1a5102bc8dffc79c8c815571 to before b7531a4f99c3887439d778afaf418d1a01a5f01b, ac27a0ec112a089f1a5102bc8dffc79c8c815571 to before 89503e5eae64637d0fa2218912b54660effe7d93, ac27a0ec112a089f1a5102bc8dffc79c8c815571 to before 52a5509ab19a5d3afe301165d9b5787bba34d842, ac27a0ec112a089f1a5102bc8dffc79c8c815571 to before b47584c556444cf7acb66b26a62cbc348eb92b78, ac27a0ec112a089f1a5102bc8dffc79c8c815571 to before ac28c5684c1cdab650a7e5065b19e91577d37a4b, ac27a0ec112a089f1a5102bc8dffc79c8c815571 to before 53bc45da8d8da92ec07877f5922b130562eb4b00, ac27a0ec112a089f1a5102bc8dffc79c8c815571 to before d5e206778e96e8667d3bde695ad372c296dc9353
Linux

Linux · 2.6.19
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: fs/ext4/dir.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.