CVE-2025-37939 — Classic Buffer Overflow in Linux
Severity
5.5MEDIUMNVD
EPSS
0.1%
top 83.11%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMay 20
Latest updateJul 8
Description
In the Linux kernel, the following vulnerability has been resolved:
libbpf: Fix accessing BTF.ext core_relo header
Update btf_ext_parse_info() to ensure the core_relo header is present
before reading its fields. This avoids a potential buffer read overflow
reported by the OSS Fuzz project.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6
Affected Packages4 packages
▶CVEListV5linux/linuxcf579164e9ea9cd41c7c1da931683a319d224890 — d529411ec44535308c5d59cbeff74be6fe14b479+3
Patches
🔴Vulnerability Details
5📋Vendor Advisories
5Debian▶
CVE-2025-37939: linux - In the Linux kernel, the following vulnerability has been resolved: libbpf: Fix...↗2025