Get real-time updates on Telegram
CVE-2025-37945: linux kernel from 5.15.63 (inclusive), before 5.16 (exclusive), from 5.19.4 (inclusive), before 6.12.24 (exclusive)…
CVE-2025-37945. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00194 (percentile 0.08489), scored 14-Oct-2026.
Affected technology
linux kernel · from 5.15.63 (inclusive), before 5.16 (exclusive)
linux
linux kernel · from 5.19.4 (inclusive), before 6.12.24 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.13.12 (exclusive)
linux
linux kernel · from 6.14 (inclusive), before 6.14.3 (exclusive)
linux
linux kernel · 6.15 · update rc1
linux
Linux · 744d23c71af39c7dc77ac7c3cac87ae86a181a85 to before 17eef1e44883845b9567afc893dc41e004c08d65, 744d23c71af39c7dc77ac7c3cac87ae86a181a85 to before 043aa41c43f8cb9cce75367ea07895ce68b5abb0, 744d23c71af39c7dc77ac7c3cac87ae86a181a85 to before a6ed6f8ec81b8ca7100dcd9e62bdbc0dff1b2259, 744d23c71af39c7dc77ac7c3cac87ae86a181a85 to before 54e5d00a8de6c13f6c01a94ed48025e882cd15f7, 744d23c71af39c7dc77ac7c3cac87ae86a181a85 to before bd4037d51d3f6667636a1383e78e48a5b7b60755, 744d23c71af39c7dc77ac7c3cac87ae86a181a85 to before fc75ea20ffb452652f0d4033f38fe88d7cfdae35, 47ac7b2f6a1ffef76e55a9ec146881a36673284b, 7dc0ed411de3450e75b2a9600b5742cbf0908167, 5.15.63 to before 5.16, 5.19.4 to before 5.20
Linux
Linux · 6.0
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: drivers/net/phy/phy_device.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-476
- CCR priority
- 22.0 /100 (P4)
- CVSS 3.1
- 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
- EPSS
- 0.00194 · percentile 0.08489 · 2026-10-14
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-37945.html