CVE-2025-37973: linux kernel from 6.5 (inclusive), before 6.6.91 (exclusive), from 6.7 (inclusive), before 6.12.29 (exclusive), from…

Affected technology

linux kernel · from 6.5 (inclusive), before 6.6.91 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.29 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.14.7 (exclusive)
linux

linux kernel · 6.15 · update rc1
linux

linux kernel · 6.15 · update rc2
linux

linux kernel · 6.15 · update rc3
linux

linux kernel · 6.15 · update rc4
linux

linux kernel · 6.15 · update rc5
linux

Linux · 2481b5da9c6b2ee1fde55a1c29eb2ca377145a10 to before 73dde269a1a43e6b1aa92eba13ad2df58bfdd38e, 2481b5da9c6b2ee1fde55a1c29eb2ca377145a10 to before 9423f6da825172b8dc60d4688ed3d147291c3be9, 2481b5da9c6b2ee1fde55a1c29eb2ca377145a10 to before e1c6d0c6199bd5f4cfc7a66ae7032b6e805f904d, 2481b5da9c6b2ee1fde55a1c29eb2ca377145a10 to before 023c1f2f0609218103cbcb48e0104b144d4a16dc
Linux

Linux · 6.5
Linux

Component: Not specified by the source
File: net/wireless/scan.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.1/10) rates confidentiality and availability impact as high; integrity impact as none. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.