CVE-2025-37883: s390/sclp: Add check for get_zeroed_page()
In the Linux kernel, the following vulnerability has been resolved:
s390/sclp: Add check for getzeroedpage()
Add check for the return value of getzeroedpage() in sclpconsoleinit() to prevent null pointer dereference. Furthermore, to solve the memory leak caused by the loop allocation, add a free helper to do the free job.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-37883?
CVE-2025-37883 is classified as a medium severity vulnerability due to potential null pointer dereference and memory leak issues.
How do I fix CVE-2025-37883?
To fix CVE-2025-37883, update to the latest version of the Linux kernel where this vulnerability has been resolved.
What impact does CVE-2025-37883 have on system security?
CVE-2025-37883 may lead to system crashes or instability due to null pointer dereference, impacting system availability.
Which systems are affected by CVE-2025-37883?
CVE-2025-37883 affects various versions of the Linux kernel, specifically those utilizing the sclp console functionality.
Is there a workaround for CVE-2025-37883 before applying a patch?
There are no known effective workarounds for CVE-2025-37883; applying the kernel patch is the recommended action.