CVE-2025-37974
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
36/100
Published: 2025-05-20
Modified: 2026-11-05
First seen: 2026-11-05
Status: active
Attack Surface
Low Complexity
No Interaction
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
None
I:
None
A:
High
Description
In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix missing check for zpci_create_device() error return The zpci_create_device() function returns an error pointer that needs to be checked before dereferencing it as a struct zpci_dev pointer. Add the missing check in __clp_add() where it was missed when adding the scan_list in the fixed commit. Simply not adding the device to the scan list results in the previous behavior.
Weakness Classification (1)
Affected Software (11)
| Vendor | Product | Version |
|---|---|---|
| Linux | Linux | 1f3b309108fd0660ea8614a72328ba866ccd3378 < be54b750c333a9db7c3b3686846bb06b07b011fe |
| Linux | Linux | 0467cdde8c4320bbfdb31a8cff1277b202f677fc < 2769b718e164df983c20c314b263a71a699be6cd |
| Linux | Linux | 0467cdde8c4320bbfdb31a8cff1277b202f677fc < 42420c50c68f3e95e90de2479464f420602229fc |
| Linux | Linux | 6.12.5 < 6.12.29 |
| Linux | Linux | 6.13 |
| linux | linux_kernel | 6.12.5 – 6.12.29 |
| linux | linux_kernel | 6.15 |
| linux | linux_kernel | 6.15 |
| linux | linux_kernel | 6.15 |
| linux | linux_kernel | 6.15 |
| linux | linux_kernel | 6.15 |