Use-after-free in Linux kernel - CVE-2025-37838

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU107657

Use-after-free in Linux kernel - CVE-2025-37838

Published: April 22, 2025 / Updated: May 11, 2025


Vulnerability identifier: #VU107657
CSH Severity: Low
CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-37838
CWE-ID: CWE-416
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the ssip_reset() function in drivers/hsi/clients/ssi_protocol.c. A local user can escalate privileges on the system.


Affected software

Linux kernel
Debian Linux
Ubuntu
linux (Ubuntu package)
linux-fips (Ubuntu package)
linux-aws-fips (Ubuntu package)
linux-oracle (Ubuntu package)
linux-kvm (Ubuntu package)
linux-azure (Ubuntu package)
linux-azure-fips (Ubuntu package)
linux-iot (Ubuntu package)
linux-xilinx-zynqmp (Ubuntu package)
linux-intel-iot-realtime (Ubuntu package)
linux-raspi (Ubuntu package)
linux-intel-iotg-5.15 (Ubuntu package)
linux-azure-5.15 (Ubuntu package)
linux (Debian package)
linux-azure-nvidia (Ubuntu package)
linux-nvidia-6.8 (Ubuntu package)
linux-gcp (Ubuntu package)
linux-aws-6.8 (Ubuntu package)
linux-realtime (Ubuntu package)
linux-aws (Ubuntu package)

How to mitigate CVE-2025-37838

Install update from vendor's website.

Linux kernel - addressed in versions 5.4.293, 5.10.237, 5.15.181, 6.1.135, 6.6.88, 6.12.24, 6.13.12, 6.14.3
linux (Ubuntu package) - addressed in versions 4.4.0.274.280, 4.4.0-274.308, 4.4.0.274.308~14.04.1, 4.4.0-274.308~14.04.1, 4.4.0.1149.146, 4.4.0-1149.155, 4.4.0.1150.147, 4.4.0-1150.161, 4.4.0.1187.191, 4.4.0-1187.202, 4.15.0.243.227, 4.15.0-243.255, 4.15.0.243.255~16.04.1, 4.15.0-243.255~16.04.1, 4.15.0.1148.153, 4.15.0-1148.159, 4.15.0.1179.192, 4.15.0-1179.196, 4.15.0.1179.196~16.04.1, 4.15.0-1179.196~16.04.1, 4.15.0.1186.184, 4.15.0-1186.199, 4.15.0-1186.199~16.04.1, 4.15.0.1186.199~16.04.1, 5.4.0.223.215, 5.4.0-223.243, 5.4.0-223.243~18.04.1, 5.4.0.223.243~18.04.1, 5.4.0.1070.70, 5.4.0-1070.74, 5.4.0-1098.103, 5.4.0.1098.103~18.04.1, 5.4.0-1098.103~18.04.1, 5.4.0.1098.127, 5.4.0-1135.148, 5.4.0.1135.148~18.04.1, 5.4.0-1135.148~18.04.1, 5.4.0.1135.166, 5.4.0.1139.135, 5.4.0-1139.148, 5.4.0.1150.144, 5.4.0-1150.160~18.04.1, 5.4.0.1150.160~18.04.1, 5.4.0.1152.149, 5.4.0-1152.162, 5.4.0-1152.162~18.04.1, 5.4.0.1152.162~18.04.1, 5.4.0.1155.157, 5.4.0-1155.164, 5.4.0.1155.164~18.04.1, 5.4.0-1155.164~18.04.1, 5.15.0.144.130, 5.15.0.144.141, 5.15.0-144.157, 5.15.0.144.157~20.04.1, 5.15.0-144.157~20.04.1, 5.15.0-1030.30, 5.15.0.1030.32, 5.15.0-1041.41, 5.15.0.1041.41, 5.15.0-1041.41~20.04.1, 5.15.0.1041.41~20.04.1, 5.15.0.1070.69, 5.15.0-1070.78, 5.15.0.1080.76, 5.15.0-1080.83, 5.15.0.1080.83~20.04.1, 5.15.0-1080.83~20.04.1, 5.15.0.1082.82, 5.15.0-1082.83, 5.15.0.1083.83, 5.15.0-1083.89, 5.15.0.1085.81, 5.15.0.1085.84, 5.15.0-1085.91, 5.15.0-1085.91~20.04.3, 5.15.0.1085.91~20.04.3, 5.15.0.1087.83, 5.15.0-1087.96, 5.15.0.1087.96~20.04.1, 5.15.0-1087.96~20.04.2, 5.15.0.1088.91, 5.15.0-1088.95, 5.15.0.1088.95~20.04.1, 5.15.0-1088.95~20.04.1, 6.8.0-87.88, 6.8.0-87.88.1, 6.8.0-87.88.1~22.04.1, 6.8.0-87.88~22.04.1, 6.8.0-1026.29, 6.8.0-1040.40, 6.8.0-1040.40~22.04.1, 6.8.0-1042.44, 6.8.0-1042.45.1, 6.8.0-1042.45+1, 6.14.0-22.22, 6.14.0-1004.4, 6.14.0-1007.7, 6.14.0-1008.8
linux-fips (Ubuntu package) - addressed in versions 4.4.0.1119.120, 4.4.0-1119.126
linux-aws-fips (Ubuntu package) - addressed in versions 4.15.0.1141.138, 4.15.0-1141.153, 4.15.0.2087.85, 4.15.0-2087.93, 4.15.0.2124.118, 4.15.0-2124.130, 5.4.0.1126.123, 5.4.0-1126.136, 5.4.0.1152.99, 5.4.0-1152.162+fips1, 5.4.0.1155.97, 5.4.0-1155.164+fips1, 5.15.0.144.84, 5.15.0-144.157+fips1, 5.15.0.1087.77, 5.15.0-1087.96+fips1, 5.15.0.1088.84, 5.15.0-1088.95+fips1
linux-oracle (Ubuntu package) - addressed in versions 4.15.0.1148.159~16.04.1, 4.15.0-1148.159~16.04.1
linux-kvm (Ubuntu package) - addressed in versions 4.15.0.1168.159, 4.15.0-1168.173, 5.15.0.1084.80, 5.15.0-1084.89
linux-azure (Ubuntu package) - addressed in versions 4.15.0.1194.162, 4.15.0-1194.209, 4.15.0.1194.209~14.04.1, 4.15.0-1194.209~14.04.1, 4.15.0.1194.209~16.04.1, 4.15.0-1194.209~16.04.1, 5.4.0.1156.150, 5.4.0-1156.163, 5.4.0-1156.163~18.04.1, 5.4.0.1156.163~18.04.1, 5.15.0.1094.92, 5.15.0-1094.103, 6.8.0-1044.50, 6.8.0-1044.50~22.04.1, 6.14.0-1007.7
linux-azure-fips (Ubuntu package) - addressed in versions 4.15.0.2104.100, 4.15.0-2104.110, 5.4.0.1157.94, 5.4.0-1157.164+fips1, 5.15.0.1094.79, 5.15.0-1094.103+fips1, 6.8.0-1044.50+fips1
linux-iot (Ubuntu package) - update to 5.4.0-1056.59
linux-xilinx-zynqmp (Ubuntu package) - addressed in versions 5.15.0.1052.55, 5.15.0-1052.56
linux-intel-iot-realtime (Ubuntu package) - addressed in versions 5.15.0-1081.83, 5.15.0.1081.85, 5.15.0.1088.92, 5.15.0-1088.97
linux-raspi (Ubuntu package) - addressed in versions 5.15.0.1083.81, 5.15.0-1083.86, 6.8.0.1019.20, 6.8.0-1019.20, 6.8.0-1042.46, 6.8.0-2033.34
linux-intel-iotg-5.15 (Ubuntu package) - addressed in versions 5.15.0.1083.89~20.04.1, 5.15.0-1083.89~20.04.1
linux-azure-5.15 (Ubuntu package) - addressed in versions 5.15.0.1094.103~20.04.1, 5.15.0-1094.103~20.04.1
linux (Debian package) - update to 6.1.135-1
linux-azure-nvidia (Ubuntu package) - update to 6.8.0-1029.32
linux-nvidia-6.8 (Ubuntu package) - addressed in versions 6.8.0-1039.40, 6.8.0-1039.40~22.04.1, 6.8.0-1042.45~22.04.1
linux-gcp (Ubuntu package) - addressed in versions 6.8.0-1039.44, 6.8.0-1043.46~22.04.1
linux-aws-6.8 (Ubuntu package) - update to 6.8.0-1042.44~22.04.1
linux-realtime (Ubuntu package) - addressed in versions 6.8.1-1037.38, 6.8.1-1037.38~22.04.1
linux-aws (Ubuntu package) - addressed in versions 6.14.0-1007.7, 6.14.0-1007.7+1

External References

Related Security Bulletins