CVE-2025-37883: s390/sclp: Add check for get_zeroed_page()
Vulnerability summary
CVE-2025-37883 is a medium (CVSS 5.5) NULL Pointer Dereference vulnerability in debian debian_linux. EPSS estimates a 0.29% chance of exploitation in the next 30 days, higher than 21.3% of scored vulnerabilities.
Not severe (CVSS 5.5, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 32 · Related 29Timeline
- 09-05-2025PublishedVulnerability first disclosed.
- 11-05-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Add check for get_zeroed_page() Add check for the return value of get_zeroed_page() in sclp_console_init() to prevent null pointer dereference. Furthermore, to solve the memory leak caused by the loop allocation, add a free helper to do the free job.
CVSS metrics
3 scores · 3 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.29%
Chance of exploitation in the next 30 days
Percentile
21%
Versus all other CVEs
30-day change
Increase +0.01 pp
From 0.27% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Ubuntu141 products
- linuxAll versions (No fix recorded) | < 5.15.0-144.157 | < 6.8.0-100.100
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded) | < 5.15.0-1088.95 | < 6.8.0-1046.49
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Debian2 products
- linux< 6.1.137-1 | < 6.12.27-1
- debian_linuxEOL11.0
Linux2 products
- linux≥ 4c8f4794b61e89dd68f96cfc23a9d9b6c25be420, < e1e00dc45648125ef7cb87ebc3b581ac224e7b39 | ≥ 4c8f4794b61e89dd68f96cfc23a9d9b6c25be420, < 397254706eba9d8f99fd237feede7ab3169a7f9a | ≥ 4c8f4794b61e89dd68f96cfc23a9d9b6c25be420, < 28e5a867aa542e369e211c2baba7044228809a99 | ≥ 4c8f4794b61e89dd68f96cfc23a9d9b6c25be420, < 3b3aa72636a6205933609ec274a8747720c1ee3f | ≥ 4c8f4794b61e89dd68f96cfc23a9d9b6c25be420, < f69f8a93aacf6e99af7b1cc992d8ca2cc07b96fb | ≥ 4c8f4794b61e89dd68f96cfc23a9d9b6c25be420, < 3db42c75a921854a99db0a2775814fef97415bac | 2.6.31
- linux_kernel< 5.15.181 | ≥ 5.16, < 6.1.136 | ≥ 6.2, < 6.6.89 | ≥ 6.7, < 6.12.26 | ≥ 6.13, < 6.14.5
3 vendors · 145 products
