CVE-2025-37913: linux kernel 5.0; +2 more affected products

Affected technology

linux kernel · from 5.0.1 (inclusive), before 5.4.294 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.238 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.182 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.138 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.90 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.28 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.14.6 (exclusive)
linux

linux kernel · 5.0
linux

linux kernel · 5.0 · update rc3
linux

linux kernel · 5.0 · update rc4
linux

linux kernel · 5.0 · update rc5
linux

linux kernel · 5.0 · update rc6
linux

linux kernel · 5.0 · update rc7
linux

linux kernel · 5.0 · update rc8
linux

linux kernel · 6.15 · update rc1
linux

linux kernel · 6.15 · update rc2
linux

linux kernel · 6.15 · update rc3
linux

linux kernel · 6.15 · update rc4
linux

debian linux · 11.0
debian

Linux · 37d9cf1a3ce35de3df6f7d209bfb1f50cf188cea to before 041f410aec2c1751ee22b8b73ba05d38c3a6a602, 37d9cf1a3ce35de3df6f7d209bfb1f50cf188cea to before 005a479540478a820c52de098e5e767e63e36f0a, 37d9cf1a3ce35de3df6f7d209bfb1f50cf188cea to before 0bf32d6fb1fcbf841bb9945570e0e2a70072c00f, 37d9cf1a3ce35de3df6f7d209bfb1f50cf188cea to before 0aa23e0856b7cedb3c88d8e3d281c212c7e4fbeb, 37d9cf1a3ce35de3df6f7d209bfb1f50cf188cea to before a43783119e01849fbf2fe8855634e8989b240cb4, 37d9cf1a3ce35de3df6f7d209bfb1f50cf188cea to before 53bc0b55178bd59bdd4bcd16349505cabf54b1a2, 37d9cf1a3ce35de3df6f7d209bfb1f50cf188cea to before 370218e8ce711684acc4cdd3cc3c6dd7956bc165, 37d9cf1a3ce35de3df6f7d209bfb1f50cf188cea to before f139f37dcdf34b67f5bf92bc8e0f7f6b3ac63aa4
Linux

Linux · 5.0
Linux

Component: Not specified by the source
File: net/sched/sch_qfq.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.