Get real-time updates on Telegram
CVE-2025-37915: linux kernel 5.0; +1 more affected products
CVE-2025-37915. CVSS 3.1 base score 7.0 (HIGH, NVD). EPSS 0.00216 (percentile 0.11187), scored 14-Oct-2026.
Affected technology
linux kernel · from 5.0.1 (inclusive), before 5.4.294 (exclusive)
linux
linux kernel · from 5.5 (inclusive), before 5.10.238 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.182 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.138 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.90 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.28 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.14.6 (exclusive)
linux
linux kernel · 5.0
linux
linux kernel · 5.0 · update rc3
linux
linux kernel · 5.0 · update rc4
linux
linux kernel · 5.0 · update rc5
linux
linux kernel · 5.0 · update rc6
linux
linux kernel · 5.0 · update rc7
linux
linux kernel · 5.0 · update rc8
linux
linux kernel · 6.15 · update rc1
linux
linux kernel · 6.15 · update rc2
linux
linux kernel · 6.15 · update rc3
linux
linux kernel · 6.15 · update rc4
linux
Linux · 37d9cf1a3ce35de3df6f7d209bfb1f50cf188cea to before 5da3aad1a13e7edb8ff0778a444ccf49930313e9, 37d9cf1a3ce35de3df6f7d209bfb1f50cf188cea to before 4b07ac06b0a712923255aaf2691637693fc7100d, 37d9cf1a3ce35de3df6f7d209bfb1f50cf188cea to before 2968632880f1792007eedd12eeedf7f6e2b7e9f3, 37d9cf1a3ce35de3df6f7d209bfb1f50cf188cea to before 4f0ecf50cdf76da95828578a92f130b653ac2fcf, 37d9cf1a3ce35de3df6f7d209bfb1f50cf188cea to before db205b92dfe0501e5b92fb7cf00971d0e44ba3eb, 37d9cf1a3ce35de3df6f7d209bfb1f50cf188cea to before 26e75716b94d6ff9be5ea07d63675c4d189f30b4, 37d9cf1a3ce35de3df6f7d209bfb1f50cf188cea to before ab2248110738d4429668140ad22f530a9ee730e1, 37d9cf1a3ce35de3df6f7d209bfb1f50cf188cea to before f99a3fbf023e20b626be4b0f042463d598050c9a
Linux
Linux · 5.0
Linux
Component: Not specified by the source
File: net/sched/sch_drr.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-415
- CCR priority
- 28.1 /100 (P4)
- CVSS 3.1
- 7.0 /10 · CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H · NVD
- EPSS
- 0.00216 · percentile 0.11187 · 2026-10-14
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-15 22:58:54.984414+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-37915.html