CVE-2025-37998: linux kernel from 3.3 (inclusive), before 5.4.294 (exclusive), from 5.5 (inclusive), before 5.10.238 (exclusive), from…

Affected technology

linux kernel · from 3.3 (inclusive), before 5.4.294 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.238 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.183 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.139 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.91 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.29 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.14.7 (exclusive)
linux

linux kernel · 6.15 · update rc1
linux

linux kernel · 6.15 · update rc2
linux

linux kernel · 6.15 · update rc3
linux

linux kernel · 6.15 · update rc4
linux

linux kernel · 6.15 · update rc5
linux

debian linux · 11.0
debian

Linux · ccb1352e76cff0524e7ccb2074826a092dd13016 to before 6712dc21506738f5f22b4f68b7c0d9e0df819dbd, ccb1352e76cff0524e7ccb2074826a092dd13016 to before 06b4f110c79716c181a8c5da007c259807840232, ccb1352e76cff0524e7ccb2074826a092dd13016 to before 47f7f00cf2fa3137d5c0416ef1a71bdf77901395, ccb1352e76cff0524e7ccb2074826a092dd13016 to before bca8df998cce1fead8cbc69144862eadc2e34c87, ccb1352e76cff0524e7ccb2074826a092dd13016 to before 0236742bd959332181c1fcc41a05b7b709180501, ccb1352e76cff0524e7ccb2074826a092dd13016 to before ec334aaab74705cc515205e1da3cb369fdfd93cd, ccb1352e76cff0524e7ccb2074826a092dd13016 to before 4fa672cbce9c86c3efb8621df1ae580d47813430, ccb1352e76cff0524e7ccb2074826a092dd13016 to before 6beb6835c1fbb3f676aebb51a5fee6b77fed9308
Linux

Linux · 3.3
Linux

Component: Not specified by the source
File: net/openvswitch/actions.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.