CVE-2025-37936: linux kernel from 6.0 (inclusive), before 6.1.138 (exclusive), from 6.2 (inclusive), before 6.6.90 (exclusive), from…

Affected technology

linux kernel · from 6.0 (inclusive), before 6.1.138 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.90 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.28 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.14.6 (exclusive)
linux

linux kernel · 6.15 · update rc1
linux

linux kernel · 6.15 · update rc2
linux

linux kernel · 6.15 · update rc3
linux

linux kernel · 6.15 · update rc4
linux

debian linux · 11.0
debian

Linux · c59a1f106f5cd4843c097069ff1bb2ad72103a67 to before 160153cf9e4aa875ad086cc094ce34aac8e13d63, c59a1f106f5cd4843c097069ff1bb2ad72103a67 to before 34b6fa11431aef71045ae5a00d90a7d630597eda, c59a1f106f5cd4843c097069ff1bb2ad72103a67 to before 44ee0afc9d1e7a7c1932698de01362ed80cfc4b5, c59a1f106f5cd4843c097069ff1bb2ad72103a67 to before 86aa62895fc2fb7ab09d7ca40fae8ad09841f66b, c59a1f106f5cd4843c097069ff1bb2ad72103a67 to before 58f6217e5d0132a9f14e401e62796916aa055c1b
Linux

Linux · 6.0
Linux

Component: Not specified by the source
File: arch/x86/events/intel/core.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.7/10) rates confidentiality impact as low; integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.