P4Verified

CVE-2025-37909: linux kernel from 4.17 (inclusive), before 5.4.294 (exclusive), from 5.5 (inclusive), before 5.10.238 (exclusive)…

CVE-2025-37909. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00221 (percentile 0.11721), scored 14-Oct-2026.

Affected technology

linux kernel · from 4.17 (inclusive), before 5.4.294 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.238 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.182 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.138 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.90 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.28 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.14.6 (exclusive)
linux

linux kernel · 6.15 · update rc1
linux

linux kernel · 6.15 · update rc2
linux

linux kernel · 6.15 · update rc3
linux

linux kernel · 6.15 · update rc4
linux

debian linux · 11.0
debian

Linux · 23f0703c125be490f70501b6b24ed5645775c56a to before 093855ce90177488eac772de4eefbb909033ce5f, 23f0703c125be490f70501b6b24ed5645775c56a to before 6c65ee5ad632eb8dcd3a91cf5dc99b22535f44d9, 23f0703c125be490f70501b6b24ed5645775c56a to before df993daa4c968b4b23078eacc248f6502ede8664, 23f0703c125be490f70501b6b24ed5645775c56a to before a0e0efbabbbe6a1859bc31bf65237ce91e124b9b, 23f0703c125be490f70501b6b24ed5645775c56a to before dae1ce27ceaea7e1522025b15252e3cc52802622, 23f0703c125be490f70501b6b24ed5645775c56a to before 189b05f189cac9fd233ef04d31cb5078c4d09c39, 23f0703c125be490f70501b6b24ed5645775c56a to before f42c18e2f14c1b1fdd2a5250069a84bc854c398c, 23f0703c125be490f70501b6b24ed5645775c56a to before 2d52e2e38b85c8b7bc00dca55c2499f46f8c8198
Linux

Linux · 4.17
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: drivers/net/ethernet/microchip/lan743x_main.c, drivers/net/ethernet/microchip/lan743x_main.h

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 15-Oct-2026 09:20 UTC

CWE: CWE-401
CCR priority: 22.1 /100 (P4)
CVSS 3.1: 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS: 0.00221 · percentile 0.11721 · 2026-10-14
KEV: no

Provenance

FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2025-37909.html