CVE-2025-37808

MediumCVSS 5.5/10Last modified Nov 5, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: null - Use spin lock instead of mutex

As the null algorithm may be freed in softirq context through af_alg, use spin locks instead of mutexes to protect the default null algorithm.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= 330234638e16b7b95e8e5e6be719a61a93f074b8, < f7a5a5c8e1ec16a4b2041398abe95de0e14572ef; >= 330234638e16b7b95e8e5e6be719a61a93f074b8, < e307c54ac8198bf09652c72603ba6e6d97798410; >= 330234638e16b7b95e8e5e6be719a61a93f074b8, < 1dd4a8561d85dea545cf93f56efc48df8176e218; >= 330234638e16b7b95e8e5e6be719a61a93f074b8, < e27244cbe10658a66b8775be7f0acc4ad2f618d6; >= 330234638e16b7b95e8e5e6be719a61a93f074b8, < 1b66a5920b7fc7cc6251192a3fcad115b6d75dd5; >= 330234638e16b7b95e8e5e6be719a61a93f074b8, < 0486de3c1b8223138dcc614846bd76364f758de6; >= 330234638e16b7b95e8e5e6be719a61a93f074b8, < 8cf2945512a8c0ef74ddd5b5a4f6b6a2fb1a4efb; >= 330234638e16b7b95e8e5e6be719a61a93f074b8, < dcc47a028c24e793ce6d6efebfef1a1e92f80297
LinuxLinux4.2

References

Timeline

Published
May 8, 2025
Last modified
Nov 5, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-378095.5In the Linux kernel, the following vulnerability has been resolved: usb: typec: class: Fix NULL pointer access Concurrent calls to typec_pCVE-2025-37816.4The Raisely Donation Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's raisely_donation_form shortcodeCVE-2025-378107.8In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: check that event count does not exceed event buffer CVE-2025-378115.5In the Linux kernel, the following vulnerability has been resolved: usb: chipidea: ci_hdrc_imx: fix usbmisc handling usbmisc is an optionaCVE-2025-378125.5In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: Fix deadlock when using NCM gadget The cdns3 driver has thCVE-2025-378135.5In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix invalid pointer dereference in Etron workaround This chCVE-2025-378145.5In the Linux kernel, the following vulnerability has been resolved: tty: Require CAP_SYS_ADMIN for all usages of TIOCL_SELMOUSEREPORT ThisCVE-2025-378155.5In the Linux kernel, the following vulnerability has been resolved: misc: microchip: pci1xxxx: Fix Kernel panic during IRQ handler registraCVE-2025-378165.5In the Linux kernel, the following vulnerability has been resolved: mei: vsc: Fix fortify-panic caused by invalid counted_by() use gcc 15 CVE-2025-378177.8In the Linux kernel, the following vulnerability has been resolved: mcb: fix a double free bug in chameleon_parse_gdd() In chameleon_parseCVE-2025-378185.5In the Linux kernel, the following vulnerability has been resolved: LoongArch: Return NULL from huge_pte_offset() for invalid PMD LoongArcCVE-2025-378197.8In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() With AC
CVE-2025-37808: Medium severity, CVSS 5.5 | Vulnix