CVE-2025-37803

HIGH

Published May 8, 2025 Modified Nov 3, 2025 CWE-120

Description

In the Linux kernel, the following vulnerability has been resolved: udmabuf: fix a buf size overflow issue during udmabuf creation by casting size_limit_mb to u64 when calculate pglimit.

Is your site exposed to CVE-2025-37803?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness Type (CWE)

CWE-120 CWE-120

Affected Products

Vendor	Product	Versions
linux	linux_kernel	< 5.4.293
linux	linux_kernel	5.5 — 5.10.237
linux	linux_kernel	5.11 — 5.15.181
linux	linux_kernel	5.16 — 6.1.136
linux	linux_kernel	6.2 — 6.6.89
linux	linux_kernel	6.7 — 6.14.5
linux	linux_kernel	All

References

Advisories & Patches

https://git.kernel.org/stable/c/021ba7f1babd029e714d13a6bf2571b08af96d0f https://git.kernel.org/stable/c/13fe12c037b470321436deec393030c6153cfeb9 https://git.kernel.org/stable/c/2b8419c6ecf69007dcff54ea0b9f0b215282c55a https://git.kernel.org/stable/c/373512760e13fdaa726faa9502d0f5be2abb3d33 https://git.kernel.org/stable/c/3f6c9d66e0f8eb9679b57913aa64b4d2266f6fbe https://git.kernel.org/stable/c/b2ff4e9c599b000833d16a917f519aa2e4a75de2 https://git.kernel.org/stable/c/e84a08fc7e25cdad5d9a3def42cc770ff711193f

Other References

https://git.kernel.org/stable/c/29b65a3171a49c9b69f31035146be966cec40b7a https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html

Frequently Asked Questions

What is CVE-2025-37803? +

In the Linux kernel, the following vulnerability has been resolved: udmabuf: fix a buf size overflow issue during udmabuf creation by casting size_limit_mb to u64 when calculate pglimit. It has a CVSS v3.1 base score of 7.8 (HIGH).

How severe is CVE-2025-37803? +

CVE-2025-37803 has a CVSS v3.1 score of 7.8 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.

What products are affected by CVE-2025-37803? +

CVE-2025-37803 affects products from linux, specifically: linux_kernel. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2025-37803? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2026-27820

zlib is a Ruby interface for the zlib compression/decompression library. Versions 3.0.0 and below, 3.1.0, 3.1.1, 3.2.0 and 3.2.1 contain …

CVE-2025-8412

A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in SUSE Virtual Machine Driver Pack allows an …

CVE-2025-11698

A denial-of-service issue exists in 5380/5480/5580 controllers boot firmware lower than version 1.072. This vulnerability could potentially allow a malicious …

CVE-2025-12012

A denial-of-service issue exists in 5380/5480/5580 controllers. This vulnerability could potentially allow a malicious user to write invalid file data …

CVE-2025-12011

A denial-of-service issue exists in 5370/5570 controllers. This vulnerability could potentially allow a remote user to load an invalid project, …

CVE-2024-13503

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Newtec NTC2218, NTC2250, NTC2299 on Linux, PowerPC, ARM …