CVE-2025-37861: linux kernel from 5.14 (inclusive), before 6.12.24 (exclusive), from 6.13 (inclusive), before 6.13.12 (exclusive)…

Affected technology

linux kernel · from 5.14 (inclusive), before 6.12.24 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.13.12 (exclusive)
linux

linux kernel · from 6.14 (inclusive), before 6.14.3 (exclusive)
linux

Linux · c4f7ac64616ee513f9ac4ae6c4d8c3cccb6974df to before 65ba18c84dbd03afe9b38c06c151239d97a09834, c4f7ac64616ee513f9ac4ae6c4d8c3cccb6974df to before 8d310d66e2b0f5f9f709764641647e8a3a4924fa, c4f7ac64616ee513f9ac4ae6c4d8c3cccb6974df to before 75b67dca4195e11ccf966a704787b2aa2754a457, c4f7ac64616ee513f9ac4ae6c4d8c3cccb6974df to before f195fc060c738d303a21fae146dbf85e1595fb4c
Linux

Linux · 5.14
Linux

Component: Not specified by the source
File: drivers/scsi/mpi3mr/mpi3mr.h, drivers/scsi/mpi3mr/mpi3mr_fw.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.