PT-2025-22203 · Linux+3 · Linux Kernel+3

Anssi · Published 2025-02-11 · Updated 2026-05-26 · CVE-2025-37942

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:A/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved. The issue was related to the HID pidff, where the pool report was sometimes incorrect, causing problems on certain devices, such as the VRS DirectForce PRO. The fix involves refetching the pool report before accessing its fields to prevent potential issues, including infinite loop scenarios.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Infinite Loop

Weakness Enumeration

CWE-835

Related Identifiers

BDU:2026-04482

CVE-2025-37942

ECHO-EE13-CC93-2AF1

USN-7594-1

USN-7594-2

USN-7594-3

Affected Products

Astra Linux

Debian

Linux Kernel

Ubuntu

References · 366

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/37xxx/CVE-2025-37942.json · Exploit
• https://ubuntu.com/security/CVE-2025-22072 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22025 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2025-20530.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-37942 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37873 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22064 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22094 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40325 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37872 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22079 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22073 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37767 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22023 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37942 · Vendor Advisory