Vuldb Updates

A vulnerability has been found in Linux Kernel up to 6.15-rc3 and classified as critical. This affects the function hfsc_change_class of the component net_sched. The manipulation leads to use after free. This vulnerability is referenced as CVE-2025-37797. The attack needs to be initiated within the local network. No exploit is available. The affected component should be upgraded.

A vulnerability was found in Linux Kernel up to 6.15-rc1 and classified as problematic. This impacts the function qdisc_tree_reduce_backlog of the component codel. The manipulation results in privilege escalation. This vulnerability is identified as CVE-2025-37798. The attack can only be performed from the local network. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability classified as problematic has been found in Linux Kernel up to 6.6.88/6.12.25/6.14.4. Affected by this issue is the function xdp_prepare_buff of the component vmxnet3. Performing a manipulation results in uninitialized pointer. This vulnerability is identified as CVE-2025-37799. The attack can only be performed from the local network. There is not any exploit available. It is recommended to upgrade the affected component.

A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.6.88/6.12.25/6.14.4/6.15-rc3. This affects the function dev_uevent of the component Driver Core. The manipulation results in null pointer dereference. This vulnerability is known as CVE-2025-37800. Access to the local network is required for this attack. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability identified as critical has been detected in Linux Kernel up to 6.1.135/6.6.88/6.12.25/6.14.4/6.15-rc2. This vulnerability affects the function spi_imx_setupxfer of the component spi. This manipulation causes null pointer dereference. This vulnerability is handled as CVE-2025-37801. The attack can only be done within the local network. There is not any exploit available. You should upgrade the affected component.

A vulnerability labeled as problematic has been found in Linux Kernel up to 6.12.25/6.14.4/6.15-rc2. This issue affects the function wait_event_timeout of the component ksmbd. Such manipulation leads to missing initialization of a variable. This vulnerability is uniquely identified as CVE-2025-37802. The attack can only be initiated within the local network. No exploit exists. The affected component should be upgraded.

A vulnerability, which was classified as problematic, was found in Linux Kernel up to 6.12.25/6.14.4/6.15-rc3/2714ffdbb79b48dda03334a01af90fb024f39047. Affected is an unknown function of the component tty. Such manipulation leads to injection. This vulnerability is listed as CVE-2025-37814. The attack must be carried out from within the local network. There is no available exploit. You should upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.12.25/6.14.4/6.15-rc3. It has been classified as problematic. This affects the function test_progs of the component riscv. The manipulation leads to insufficiently random values. This vulnerability is documented as CVE-2025-37822. The attack requires being on the local network. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability labeled as critical has been found in Linux Kernel up to 6.1.135/6.6.88/6.12.25/6.14.4/6.15-rc3. The impacted element is the function xdp_convert_buff_to_frame of the component xen-netfront. Executing a manipulation can lead to null pointer dereference. This vulnerability is handled as CVE-2025-37820. The attack can only be done within the local network. There is not any exploit available. The affected component should be upgraded.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.6.88/6.12.25/6.14.4/6.15-rc3/4725344ca645a98a9d8e45e25b01a2244de5b8aa. This affects the function prepare_transfer of the component xhci. Executing a manipulation can lead to null pointer dereference. This vulnerability is tracked as CVE-2025-37813. The attack is only possible within the local network. No exploit exists. You should upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.15-rc3. It has been declared as critical. The affected element is the function hfsc_dequeue of the component net_sched. Such manipulation leads to use after free. This vulnerability is documented as CVE-2025-37823. The attack requires being on the local network. There is not any exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.12.24/6.14.3/6.15-rc1. Affected by this vulnerability is the function pvr_queue_prepare_job+0x108/0x868 of the component imagination. Such manipulation leads to use after free. This vulnerability is uniquely identified as CVE-2025-37763. The attack can only be initiated within the local network. No exploit exists. You should upgrade the affected component.

A vulnerability described as problematic has been identified in Linux Kernel up to 6.15-rc1. Affected is an unknown function of the file net/sched/sch_sfq.c of the component net_sched. The manipulation results in improper validation of array index. This vulnerability is reported as CVE-2025-37752. The attacker must have access to the local network to execute the attack. No exploit exists. Upgrading the affected component is recommended.

A vulnerability classified as problematic was found in Linux Kernel up to 6.14.3/6.15-rc2. Affected by this issue is some unknown functionality of the component iov_iter. Such manipulation leads to improper update of reference count. This vulnerability is traded as CVE-2025-37779. Access to the local network is required for this attack to succeed. There is no exploit available. Upgrading the affected component is advised.

A vulnerability labeled as critical has been found in Linux Kernel up to 6.1.134/6.6.87/6.12.24/6.14.3/6.15-rc1. Affected by this vulnerability is the function ttm_bo_delayed_delete of the component nouveau. The manipulation results in improper update of reference count. This vulnerability is cataloged as CVE-2025-37765. The attack must originate from the local network. There is no exploit available. The affected component should be upgraded.

A vulnerability classified as critical has been found in Linux Kernel up to 6.14.3/6.15-rc2. This vulnerability affects the function __smb2_lease_break_noti of the component Ksmbd. Performing a manipulation results in use after free. This vulnerability is reported as CVE-2025-37777. The attacker must have access to the local network to execute the attack. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in Linux Kernel up to 6.15-rc1. This impacts an unknown function of the file net/tls/tls_strp.c of the component net. Such manipulation leads to privilege escalation. This vulnerability is traded as CVE-2025-37756. Access to the local network is required for this attack to succeed. There is no exploit available. You should upgrade the affected component.

A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.15-rc1. This issue affects the function tipc_link_xmit. Such manipulation leads to memory leak. This vulnerability is referenced as CVE-2025-37757. The attack needs to be initiated within the local network. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability classified as critical has been found in Linux Kernel up to 6.6.87/6.12.24/6.14.3/6.15-rc2. This impacts the function smb_break_all_levII_oplock of the component ksmbd. This manipulation causes use after free. This vulnerability is registered as CVE-2025-37776. The attack requires access to the local network. No exploit is available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in Linux Kernel up to 6.1.134/6.6.87/6.12.24/6.14.3/6.15-rc2. Affected by this issue is the function Set of the component net. Executing a manipulation can lead to privilege escalation. This vulnerability appears as CVE-2025-37789. The attacker needs to be present on the local network. There is no available exploit. You should upgrade the affected component.