PT-2025-23156 · Linux+6 · Linux Kernel+6

Published 2025-05-07 · Updated 2026-05-26 · CVE-2025-37997

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.6-rc4

Description A race condition exists in the Linux kernel due to incorrect region locking in hash types, specifically in the netfilter: ipset component. This issue can occur when a hash type of set is defined with timeouts, potentially leading to a conflict between the garbage collector and the addition of new elements.

Recommendations For Linux kernel versions prior to 5.6-rc4, update to a version that includes the fix for the region locking issue in hash types to resolve the problem.

Exploit

Fix

DoS

Improper Locking

Race Condition

Weakness Enumeration

CWE-667

CWE-362

Related Identifiers

BDU:2025-11988

CVE-2025-37997

DLA-4271-1

DLA-4327-1

ECHO-E7FC-9742-E9F9

SUSE-SU-2025:02249-1

SUSE-SU-2025:02254-1

SUSE-SU-2025:02264-1

SUSE-SU-2025:02307-1

SUSE-SU-2025:02308-1

SUSE-SU-2025:02320-1

SUSE-SU-2025:02321-1

SUSE-SU-2025:02322-1

SUSE-SU-2025:02333-1

SUSE-SU-2025:02335-1

SUSE-SU-2025:02537-1

SUSE-SU-2025:02538-1

SUSE-SU-2025:02923-1

SUSE-SU-2025:20475-1

SUSE-SU-2025:20483-1

SUSE-SU-2025:20493-1

SUSE-SU-2025:20498-1

SUSE-SU-2025:2264-1

SUSE-SU-2025_02249-1

SUSE-SU-2025_02254-1

SUSE-SU-2025_02264-1

SUSE-SU-2025_02307-1

SUSE-SU-2025_02308-1

SUSE-SU-2025_02333-1

SUSE-SU-2025_02335-1

SUSE-SU-2025_02537-1

SUSE-SU-2025_02538-1

USN-7608-1

USN-7608-2

USN-7608-3

USN-7608-4

USN-7608-5

USN-7608-6

USN-7608-7

USN-7609-1

USN-7609-2

USN-7609-3

USN-7609-4

USN-7609-5

USN-7610-1

USN-7610-2

USN-7610-3

USN-7611-1

USN-7611-2

USN-7611-3

USN-7611-4

USN-7618-1

USN-7628-1

USN-7653-1

USN-7655-1

USN-7665-2

USN-7671-1

USN-7671-2

USN-7671-3

USN-7686-1

USN-7712-1

USN-7712-2

Affected Products

Astra Linux

Debian

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

References · 2275

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/37xxx/CVE-2025-37997.json · Exploit
• 🔥 https://github.com/rqdaA/security-research/tree/CVE-2025-37997/pocs/linux/kernelctf/CVE-2025-37997_cos · Exploit
• https://ubuntu.com/security/CVE-2024-38541 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2025-20530.html · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7608-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38083 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-23157 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21707 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46751 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7655-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-58007 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7610-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21917 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7608-3 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22010 · Vendor Advisory