CVE-2025-37883

MEDIUM

MEDIUM Priority: 0.02 BB Relevance: 36/100

Published: 2025-05-09 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local

AC: Low

PR: Low

UI: None

S: Unchanged

C: None

I: None

A: High

Description

In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Add check for get_zeroed_page() Add check for the return value of get_zeroed_page() in sclp_console_init() to prevent null pointer dereference. Furthermore, to solve the memory leak caused by the loop allocation, add a free helper to do the free job.

Weakness Classification (1)

CWE-476

Affected Software (9)

Vendor	Product	Version
Linux	Linux	4c8f4794b61e89dd68f96cfc23a9d9b6c25be420 < e1e00dc45648125ef7cb87ebc3b581ac224e7b39
Linux	Linux	4c8f4794b61e89dd68f96cfc23a9d9b6c25be420 < 397254706eba9d8f99fd237feede7ab3169a7f9a
Linux	Linux	4c8f4794b61e89dd68f96cfc23a9d9b6c25be420 < 28e5a867aa542e369e211c2baba7044228809a99
Linux	Linux	4c8f4794b61e89dd68f96cfc23a9d9b6c25be420 < 3b3aa72636a6205933609ec274a8747720c1ee3f
Linux	Linux	4c8f4794b61e89dd68f96cfc23a9d9b6c25be420 < f69f8a93aacf6e99af7b1cc992d8ca2cc07b96fb
Linux	Linux	4c8f4794b61e89dd68f96cfc23a9d9b6c25be420 < 3db42c75a921854a99db0a2775814fef97415bac
Linux	Linux	2.6.31
debian	debian_linux	11.0
linux	linux_kernel	< 5.15.181