CVE-2025-37822: linux kernel from 5.12 (inclusive), before 6.12.26 (exclusive), from 6.13 (inclusive), before 6.14.5 (exclusive), 6.15…

Affected technology

linux kernel · from 5.12 (inclusive), before 6.12.26 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.14.5 (exclusive)
linux

linux kernel · 6.15 · update rc1
linux

linux kernel · 6.15 · update rc2
linux

linux kernel · 6.15 · update rc3
linux

Linux · 74784081aac8a0f3636965fc230e2d3b7cc123c6 to before be6d98766ac952d38241d5a5b213f363afa421c3, 74784081aac8a0f3636965fc230e2d3b7cc123c6 to before b6d8d4d01ca8514fa89b05355f296758a91e2297, 74784081aac8a0f3636965fc230e2d3b7cc123c6 to before 77c956152a3a7c7a18b68f3654f70565b2181d03, 74784081aac8a0f3636965fc230e2d3b7cc123c6 to before bcf6d3158c5902d92b6d62335af4422b7bf7c4e2, 74784081aac8a0f3636965fc230e2d3b7cc123c6 to before 1dbb95a36499374c51b47ee8ae258a8862c20978, 74784081aac8a0f3636965fc230e2d3b7cc123c6 to before 7d1d19a11cfbfd8bae1d89cc010b2cc397cd0c48
Linux

Linux · 5.12
Linux

Component: Not specified by the source
File: arch/riscv/kernel/probes/uprobes.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.