CVE-2025-37883

MEDIUM EPSS 13.1%
Published May 9, 20251y ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published May 9, 2025 1y ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Add check for get_zeroed_page() Add check for the return value of get_zeroed_page() in sclp_console_init() to prevent null pointer dereference. Furthermore, to solve the memory leak caused by the loop allocation, add a free helper to do the free job.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
13.1% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-476 NULL Pointer Dereference Memory Safety

Affected Products 6

VendorProductVersionRange
linuxlinux_kernel* <5.15.181
linuxlinux_kernel*≥5.16  –  <6.1.136
linuxlinux_kernel*≥6.2  –  <6.6.89
linuxlinux_kernel*≥6.7  –  <6.12.26
linuxlinux_kernel*≥6.13  –  <6.14.5
debiandebian_linux11.0any

References 7

  • git.kernel.org https://git.kernel.org/stable/c/28e5a867aa542e369e211c2baba7044228809a99
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/397254706eba9d8f99fd237feede7ab3169a7f9a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/3b3aa72636a6205933609ec274a8747720c1ee3f
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/3db42c75a921854a99db0a2775814fef97415bac
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/e1e00dc45648125ef7cb87ebc3b581ac224e7b39
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/f69f8a93aacf6e99af7b1cc992d8ca2cc07b96fb
    Patch
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html
    Mailing ListThird Party Advisory

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/28e5a867aa542e369e211c2baba7044228809a99
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/397254706eba9d8f99fd237feede7ab3169a7f9a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/3b3aa72636a6205933609ec274a8747720c1ee3f
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/3db42c75a921854a99db0a2775814fef97415bac
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/e1e00dc45648125ef7cb87ebc3b581ac224e7b39
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/f69f8a93aacf6e99af7b1cc992d8ca2cc07b96fb
    Patch