PT-2025-20337 · Linux+5 · Linux Kernel+5

Published

2025-05-08

·

Updated

2026-04-20

·

CVE-2025-37808

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A vulnerability in the Linux kernel has been resolved. The issue concerned the null algorithm, which could be freed in the softirq context through af alg. To protect the default null algorithm, spin locks are used instead of mutexes.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-399

Related Identifiers

BDU:2025-10758
CVE-2025-37808
DLA-4178-1
DLA-4193-1
ECHO-0A34-4465-CD5E
MGASA-2025-0182
MGASA-2025-0183
OESA-2025-1823
OESA-2025-1824
OESA-2025-1870
USN-7594-1
USN-7594-2
USN-7594-3
USN-7654-1
USN-7654-2
USN-7654-3
USN-7654-4
USN-7654-5
USN-7655-1
USN-7686-1
USN-7711-1
USN-7712-1
USN-7712-2
USN-8028-1
USN-8028-2
USN-8028-3
USN-8028-4
USN-8028-5
USN-8028-6
USN-8028-7
USN-8028-8
USN-8031-1
USN-8031-2
USN-8031-3
USN-8052-1
USN-8052-2
USN-8074-1
USN-8074-2
USN-8126-1

Affected Products

Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Ubuntu