Incorrect calculation in Linux kernel 9p



| Updated: 2025-05-10
Risk Low
Patch available YES
Number of vulnerabilities 1
CVE-ID CVE-2025-37879
CWE-ID CWE-682
Exploitation vector Local
Public exploit N/A
Vulnerable software
 Linux kernel
Operating systems & Components / Operating system

Vendor Linux Foundation

Security Bulletin

This security bulletin contains one low risk vulnerability.

1) Incorrect calculation

EUVDB-ID: #VU108897

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2025-37879

CWE-ID: CWE-682 - Incorrect Calculation

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to incorrect calculation within the p9_client_read_once(), p9_client_write(), EXPORT_SYMBOL_GPL() and p9_client_readdir() functions in net/9p/client.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Linux kernel: 6.1 - 6.14.4

CPE2.3 External links

https://git.kernel.org/stable/c/374e4cd75617c8c2552f562f39dd989583f5c330
https://git.kernel.org/stable/c/468ff4a7c61fb811c596a7c44b6a5455e40fd12b
https://git.kernel.org/stable/c/a68768e280b7d0c967ea509e791bb9b90adc94a5
https://git.kernel.org/stable/c/c548f95688e2b5ae0e2ae43d53cf717156c7d034
https://git.kernel.org/stable/c/d0259a856afca31d699b706ed5e2adf11086c73b
https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.136
https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.26
https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.14.5
https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.89


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###