CVE-2025-37920: linux kernel from 5.1.20 (inclusive), before 5.2 (exclusive), from 5.2.3 (inclusive), before 6.12.28 (exclusive), from…

Affected technology

linux kernel · from 5.1.20 (inclusive), before 5.2 (exclusive)
linux

linux kernel · from 5.2.3 (inclusive), before 6.12.28 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.14.6 (exclusive)
linux

linux kernel · 6.15 · update rc1
linux

linux kernel · 6.15 · update rc2
linux

linux kernel · 6.15 · update rc3
linux

linux kernel · 6.15 · update rc4
linux

Linux · bf0bdd1343efbbf65b4d53aef1fce14acbd79d50 to before 975b372313dc018b9bd6cc0d85d188787054b19e, bf0bdd1343efbbf65b4d53aef1fce14acbd79d50 to before b6978c565ce33658543c637060852434b4248d30, bf0bdd1343efbbf65b4d53aef1fce14acbd79d50 to before 65d3c570614b892257dc58a1b202908242ecf8fd, bf0bdd1343efbbf65b4d53aef1fce14acbd79d50 to before 75a240a3e8abf17b9e00b0ef0492b1bbaa932251, bf0bdd1343efbbf65b4d53aef1fce14acbd79d50 to before a1356ac7749cafc4e27aa62c0c4604b5dca4983e, fd7c22ba7a0ad898b9ecf77dd53f5ccc48492e35, 8a090e3b73eaffe18e08ccc3fb5abecf6b0a9781, 5.1.20 to before 5.2, 5.2.3 to before 5.3
Linux

Linux · 5.3
Linux

Component: Not specified by the source
File: include/net/xdp_sock.h, include/net/xsk_buff_pool.h, net/xdp/xsk.c, net/xdp/xsk_buff_pool.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.