CVE-2025-37856: linux kernel before 6.12.24 (exclusive), from 6.13 (inclusive), before 6.13.12 (exclusive), from 6.14 (inclusive)…

Affected technology

linux kernel · before 6.12.24 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.13.12 (exclusive)
linux

linux kernel · from 6.14 (inclusive), before 6.14.3 (exclusive)
linux

Linux · a9f189716cf15913c453299d72f69c51a9b0f86b to before 9039afe6240ae01d6caf2fa731590ac74fb8a69b, a9f189716cf15913c453299d72f69c51a9b0f86b to before bf089c4d1141b27332c092b1dcca5022c415a3b6, a9f189716cf15913c453299d72f69c51a9b0f86b to before 909e60fb469d4101c6b08cf6e622efb062bb24a1, a9f189716cf15913c453299d72f69c51a9b0f86b to before 185fd73e5ac06027c4be9a129e59193f6a3ef202, a9f189716cf15913c453299d72f69c51a9b0f86b to before 7511e29cf1355b2c47d0effb39e463119913e2f6, edf3b5aadb2515c808200b904baa5b70a727f0ac, 01eca70ef8cf499d0cb6d1bbd691558e7792cf17, 5d19abcffd8404078dfa7d7118cec357b5e7bc58, 5.15.128 to before 5.16, 6.1.47 to before 6.2, 6.4.12 to before 6.5
Linux

Linux · 6.5
Linux

Component: Not specified by the source
File: fs/btrfs/extent-tree.c, fs/btrfs/transaction.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.