CVE-2025-37949: linux kernel from 4.11 (inclusive), before 5.4.294 (exclusive), from 5.5 (inclusive), before 5.10.238 (exclusive)…

Affected technology

linux kernel · from 4.11 (inclusive), before 5.4.294 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.238 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.183 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.139 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.91 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.29 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.14.7 (exclusive)
linux

linux kernel · 6.15 · update rc1
linux

linux kernel · 6.15 · update rc2
linux

linux kernel · 6.15 · update rc3
linux

linux kernel · 6.15 · update rc4
linux

linux kernel · 6.15 · update rc5
linux

debian linux · 11.0
debian

Linux · fd8aa9095a95c02dcc35540a263267c29b8fda9d to before 0e94a246bb6d9538010b6c02d2b1d4717a97b2e5, fd8aa9095a95c02dcc35540a263267c29b8fda9d to before f1bcac367bc95631afbb918348f30dec887d0e1b, fd8aa9095a95c02dcc35540a263267c29b8fda9d to before 4d260a5558df4650eb87bc41b2c9ac2d6b2ba447, fd8aa9095a95c02dcc35540a263267c29b8fda9d to before 8b02f85e84dc6f7c150cef40ddb69af5a25659e5, fd8aa9095a95c02dcc35540a263267c29b8fda9d to before cbfaf46b88a4c01b64c4186cdccd766c19ae644c, fd8aa9095a95c02dcc35540a263267c29b8fda9d to before 8e9c8a0393b5f85f1820c565ab8105660f4e8f92, fd8aa9095a95c02dcc35540a263267c29b8fda9d to before 2466b0f66795c3c426cacc8998499f38031dbb59, fd8aa9095a95c02dcc35540a263267c29b8fda9d to before 1f0304dfd9d217c2f8b04a9ef4b3258a66eedd27
Linux

Linux · 4.11
Linux

Component: Not specified by the source
File: drivers/xen/xenbus/xenbus.h, drivers/xen/xenbus/xenbus_comms.c, drivers/xen/xenbus/xenbus_dev_frontend.c, drivers/xen/xenbus/xenbus_xs.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.