CVE-2025-37911: linux kernel 5.5; +2 more affected products

Affected technology

linux kernel · from 4.19.95 (inclusive), before 4.20 (exclusive)
linux

linux kernel · from 5.4.8 (inclusive), before 5.5 (exclusive)
linux

linux kernel · from 5.5.1 (inclusive), before 5.15.182 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.138 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.90 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.28 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.14.6 (exclusive)
linux

linux kernel · 5.5
linux

linux kernel · 5.5 · update rc3
linux

linux kernel · 5.5 · update rc4
linux

linux kernel · 5.5 · update rc5
linux

linux kernel · 5.5 · update rc6
linux

linux kernel · 5.5 · update rc7
linux

linux kernel · 6.15 · update rc1
linux

linux kernel · 6.15 · update rc2
linux

linux kernel · 6.15 · update rc3
linux

linux kernel · 6.15 · update rc4
linux

debian linux · 11.0
debian

Linux · c74751f4c39232c31214ec6a3bc1c7e62f5c728b to before 69b10dd23ab826d0c7f2d9ab311842251978d0c1, c74751f4c39232c31214ec6a3bc1c7e62f5c728b to before 43292b83424158fa6ec458799f3cb9c54d18c484, c74751f4c39232c31214ec6a3bc1c7e62f5c728b to before 4d69864915a3a052538e4ba76cd6fd77cfc64ebe, c74751f4c39232c31214ec6a3bc1c7e62f5c728b to before 44807af79efd0d78fa36383dd865ddfe7992c0a6, c74751f4c39232c31214ec6a3bc1c7e62f5c728b to before 44d81a9ebf0cad92512e0ffdf7412bfe20db66ec, c74751f4c39232c31214ec6a3bc1c7e62f5c728b to before 6b87bd94f34370bbf1dfa59352bed8efab5bf419, 4bf973a1f84aefb64750bdb3afe72d54de3199d7, a76837dd731b68cc3b5690470bc9efa2a8e3801a, 4.19.95 to before 4.20, 5.4.8 to before 5.5
Linux

Linux · 5.5
Linux

Component: Not specified by the source
File: drivers/net/ethernet/broadcom/bnxt/bnxt_coredump.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.