CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2025-37915: linux kernel 5.0; +1 more affected products

CVE-2025-37915. CVSS 3.1 base score 7.0 (HIGH, NVD). EPSS 0.00216 (percentile 0.11187), scored 14-Oct-2026.

Affected technology

linux kernel · from 5.0.1 (inclusive), before 5.4.294 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.238 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.182 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.138 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.90 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.28 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.14.6 (exclusive)
linux

linux kernel · 5.0
linux

linux kernel · 5.0 · update rc3
linux

linux kernel · 5.0 · update rc4
linux

linux kernel · 5.0 · update rc5
linux

linux kernel · 5.0 · update rc6
linux

linux kernel · 5.0 · update rc7
linux

linux kernel · 5.0 · update rc8
linux

linux kernel · 6.15 · update rc1
linux

linux kernel · 6.15 · update rc2
linux

linux kernel · 6.15 · update rc3
linux

linux kernel · 6.15 · update rc4
linux

Linux · 37d9cf1a3ce35de3df6f7d209bfb1f50cf188cea to before 5da3aad1a13e7edb8ff0778a444ccf49930313e9, 37d9cf1a3ce35de3df6f7d209bfb1f50cf188cea to before 4b07ac06b0a712923255aaf2691637693fc7100d, 37d9cf1a3ce35de3df6f7d209bfb1f50cf188cea to before 2968632880f1792007eedd12eeedf7f6e2b7e9f3, 37d9cf1a3ce35de3df6f7d209bfb1f50cf188cea to before 4f0ecf50cdf76da95828578a92f130b653ac2fcf, 37d9cf1a3ce35de3df6f7d209bfb1f50cf188cea to before db205b92dfe0501e5b92fb7cf00971d0e44ba3eb, 37d9cf1a3ce35de3df6f7d209bfb1f50cf188cea to before 26e75716b94d6ff9be5ea07d63675c4d189f30b4, 37d9cf1a3ce35de3df6f7d209bfb1f50cf188cea to before ab2248110738d4429668140ad22f530a9ee730e1, 37d9cf1a3ce35de3df6f7d209bfb1f50cf188cea to before f99a3fbf023e20b626be4b0f042463d598050c9a
Linux

Linux · 5.0
Linux

Component: Not specified by the source
File: net/sched/sch_drr.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-415
CCR priority
28.1 /100 (P4)
CVSS 3.1
7.0 /10 · CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H · NVD
EPSS
0.00216 · percentile 0.11187 · 2026-10-14
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2025-37915.html