CVE-2025-37964: linux kernel from 5.15.179 (inclusive), before 5.15.183 (exclusive), from 6.1.129 (inclusive), before 6.1.139…

Affected technology

linux kernel · from 5.15.179 (inclusive), before 5.15.183 (exclusive)
linux

linux kernel · from 6.1.129 (inclusive), before 6.1.139 (exclusive)
linux

linux kernel · from 6.6.79 (inclusive), before 6.6.91 (exclusive)
linux

linux kernel · from 6.12.16 (inclusive), before 6.12.29 (exclusive)
linux

linux kernel · from 6.13.4 (inclusive), before 6.14.7 (exclusive)
linux

linux kernel · 6.15 · update rc1
linux

linux kernel · 6.15 · update rc2
linux

linux kernel · 6.15 · update rc3
linux

linux kernel · 6.15 · update rc4
linux

linux kernel · 6.15 · update rc5
linux

debian linux · 11.0
debian

Linux · 848b5815177582de0e1d0118725378e0fbadca20 to before 12f703811af043d32b1c8a30001b2fa04d5cd0ac, b47002ed65ade940839b7f439ff4a194e7d5ec28 to before 02ad4ce144bd27f71f583f667fdf3b3ba0753477, a04fe3bfc71e28009e20357b79df1e8ef7c9d600 to before d41072906abec8bb8e01ed16afefbaa558908c89, 3dbe889a1b829b4c07e0836ff853fe649e51ce4f to before d87392094f96e162fa5fa5a8640d70cc0952806f, 6db2526c1d694c91c6e05e2f186c085e9460f202 to before 399ec9ca8fc4999e676ff89a90184ec40031cf59, 6db2526c1d694c91c6e05e2f186c085e9460f202 to before fea4e317f9e7e1f449ce90dedc27a2d2a95bee5a, d1347977661342cb09a304a17701eb2d4aa21dec, 5.15.179 to before 5.15.183, 6.1.129 to before 6.1.139, 6.6.79 to before 6.6.91, 6.12.16 to before 6.12.29, 6.13.4 to before 6.14
Linux

Linux · 6.14
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: arch/x86/mm/tlb.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.