CVE-2025-37823: linux kernel 2.6.12; +2 more affected products

Affected technology

linux kernel · from 2.6.13 (inclusive), before 5.4.293 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.237 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.181 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.136 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.89 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.26 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.14.5 (exclusive)
linux

linux kernel · 2.6.12
linux

linux kernel · 2.6.12 · update rc2
linux

linux kernel · 2.6.12 · update rc3
linux

linux kernel · 2.6.12 · update rc4
linux

linux kernel · 2.6.12 · update rc5
linux

linux kernel · 6.15 · update rc1
linux

linux kernel · 6.15 · update rc2
linux

linux kernel · 6.15 · update rc3
linux

debian linux · 11.0
debian

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 68f256305ceb426d545a0dc31f83c2ab1d211a1e, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2f46d14919c39528c6e540ebc43f90055993eedc, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before da7936518996d290e2fcfcaf6cd7e15bfd87804a, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 11bccb054c1462fb069219f8e98e97a5a730758e, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 76c4c22c2437d3d3880efc0f62eca06ef078d290, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c6f035044104c6ff656f4565cd22938dc892528c, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c6936266f8bf98a53f28ef9a820e6a501e946d09, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6ccbda44e2cc3d26fd22af54c650d6d5d801addf
Linux

Linux · 2.6.12
Linux

Component: Not specified by the source
File: net/sched/sch_hfsc.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.