CVE-2025-37997: linux kernel 5.6; +2 more affected products

Affected technology

linux kernel · from 5.4.24 (inclusive), before 5.4.294 (exclusive)
linux

linux kernel · from 5.5.8 (inclusive), before 5.6 (exclusive)
linux

linux kernel · from 5.6.1 (inclusive), before 5.10.238 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.183 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.139 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.91 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.29 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.14.7 (exclusive)
linux

linux kernel · 5.6
linux

linux kernel · 5.6 · update rc4
linux

linux kernel · 5.6 · update rc5
linux

linux kernel · 5.6 · update rc6
linux

linux kernel · 5.6 · update rc7
linux

linux kernel · 6.15 · update rc1
linux

linux kernel · 6.15 · update rc2
linux

linux kernel · 6.15 · update rc3
linux

linux kernel · 6.15 · update rc4
linux

linux kernel · 6.15 · update rc5
linux

debian linux · 11.0
debian

Linux · 5dd9488ae41070b69d2f4acb580f77db5705f9ca to before 00cfc5fad1491796942a948808afb968a0a3f35b, f66ee0410b1c3481ee75e5db9b34547b4d582465 to before 226ce0ec38316d9e3739e73a64b6b8304646c658, f66ee0410b1c3481ee75e5db9b34547b4d582465 to before 82c1eb32693bc48251d92532975e19160987e5b9, f66ee0410b1c3481ee75e5db9b34547b4d582465 to before aa77294b0f73bb8265987591460cd25b8722c3df, f66ee0410b1c3481ee75e5db9b34547b4d582465 to before a3dfec485401943e315c394c29afe2db8f9481d6, f66ee0410b1c3481ee75e5db9b34547b4d582465 to before e2ab67672b2288521a6146034a971f9a82ffc5c5, f66ee0410b1c3481ee75e5db9b34547b4d582465 to before 6e002ecc1c8cfdfc866b9104ab7888da54613e59, f66ee0410b1c3481ee75e5db9b34547b4d582465 to before 8478a729c0462273188263136880480729e9efca, a469bab3386aebff33c59506f3a95e35b91118fd, 5.4.24 to before 5.4.294, 5.5.8 to before 5.6
Linux

Linux · 5.6
Linux

Component: Not specified by the source
File: net/netfilter/ipset/ip_set_hash_gen.h

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.