CVE-2025-37883: s390/sclp: Add check for get_zeroed_page()
First published: Fri May 09 2025(Updated: )
In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Add check for get_zeroed_page() Add check for the return value of get_zeroed_page() in sclp_console_init() to prevent null pointer dereference. Furthermore, to solve the memory leak caused by the loop allocation, add a free helper to do the free job.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Kernel |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/stable/c/e1e00dc45648125ef7cb87ebc3b581ac224e7b39
- https://git.kernel.org/stable/c/397254706eba9d8f99fd237feede7ab3169a7f9a
- https://git.kernel.org/stable/c/28e5a867aa542e369e211c2baba7044228809a99
- https://git.kernel.org/stable/c/3b3aa72636a6205933609ec274a8747720c1ee3f
- https://git.kernel.org/stable/c/f69f8a93aacf6e99af7b1cc992d8ca2cc07b96fb
- https://git.kernel.org/stable/c/3db42c75a921854a99db0a2775814fef97415bac
Frequently Asked Questions
What is the severity of CVE-2025-37883?
CVE-2025-37883 is classified as a medium severity vulnerability due to potential null pointer dereference and memory leak issues.
How do I fix CVE-2025-37883?
To fix CVE-2025-37883, update to the latest version of the Linux kernel where this vulnerability has been resolved.
What impact does CVE-2025-37883 have on system security?
CVE-2025-37883 may lead to system crashes or instability due to null pointer dereference, impacting system availability.
Which systems are affected by CVE-2025-37883?
CVE-2025-37883 affects various versions of the Linux kernel, specifically those utilizing the sclp console functionality.
Is there a workaround for CVE-2025-37883 before applying a patch?
There are no known effective workarounds for CVE-2025-37883; applying the kernel patch is the recommended action.
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/title
- agent/description
- agent/type
- agent/weakness
- agent/first-publish-date
- agent/guess-ai
- agent/software-canonical-lookup
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/author
- agent/last-modified-date
- agent/source
- agent/tags
- agent/event
- vendor/linux
- canonical/linux kernel