CVE-2025-37813: linux kernel from 6.6.66 (inclusive), before 6.6.89 (exclusive), from 6.11.11 (inclusive), before 6.12 (exclusive)…

Affected technology

linux kernel · from 6.6.66 (inclusive), before 6.6.89 (exclusive)
linux

linux kernel · from 6.11.11 (inclusive), before 6.12 (exclusive)
linux

linux kernel · from 6.12.2 (inclusive), before 6.12.26 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.14.5 (exclusive)
linux

linux kernel · 6.15 · update rc1
linux

linux kernel · 6.15 · update rc2
linux

linux kernel · 6.15 · update rc3
linux

Linux · fbc0a0c7718a6cb1dc5e0811a4f88a2b1deedfa1 to before 142273a49f2c315eabdbdf5a71c15e479b75ca91, 9258c9ed32294ce3a4b58c9d92fc49ba030d35c9 to before bce3055b08e303e28a8751f6073066f5c33a0744, 5e1c67abc9301d05130b7e267c204e7005503b33 to before 0624e29c595b05e7a0e6d1c368f0a05799928e30, 5e1c67abc9301d05130b7e267c204e7005503b33 to before 1ea050da5562af9b930d17cbbe9632d30f5df43a, 4725344ca645a98a9d8e45e25b01a2244de5b8aa, 6.6.66 to before 6.6.89, 6.12.2 to before 6.12.26, 6.11.11 to before 6.12
Linux

Linux · 6.13
Linux

Component: Not specified by the source
File: drivers/usb/host/xhci-ring.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.