5.5

CVE-2025-37965: linux

CVSS: 5.5v3.1MediumAnalyzed
AliasesUBUNTU-CVE-2025-37965DEBIAN-CVE-2025-37965
Published 20-05-2025Last modified 11-05-2026
Open JSON

Vulnerability summary

CVE-2025-37965 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.19% chance of exploitation in the next 30 days, higher than 7.8% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.19%
0%100%
Low · +0.01 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 6 · Related 6
SUSE-SU-2025:02254-1SUSE-SU-2025:02307-1SUSE-SU-2025:02333-1USN-7699-1USN-7699-2USN-7721-1

Timeline

  1. 20-05-2025
    PublishedVulnerability first disclosed.
  2. 11-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix invalid context error in dml helper [Why] "BUG: sleeping function called from invalid context" error. after: "drm/amd/display: Protect FPU in dml2_validate()/dml21_validate()" The populate_dml_plane_cfg_from_plane_state() uses the GFP_KERNEL flag for memory allocation, which shouldn't be used in atomic contexts. The allocation is needed only for using another helper function get_scaler_data_for_plane(). [How] Modify helpers to pass a pointer to scaler_data within existing context, eliminating the need for dynamic memory allocation/deallocation and copying. (cherry picked from commit bd3e84bc98f81b44f2c43936bdadc3241d654259)

CVSS metrics

3 scores · 3 sources · 1 version

EPSS trend

Probability

0.19%

Chance of exploitation in the next 30 days

Percentile

8%

Versus all other CVEs

30-day change

+0.01 pp

From 0.17% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.19%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu85 products
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
  • linux-aws-5.13All versions (No fix recorded)
  • linux-aws-5.19All versions (No fix recorded)
Linux2 products
  • linux≥ 74d6fba60f05ca6b298702233b6e6cc7629eeb5a, < d8c4afe78385cd355e4d80299d785379d6e874df | ≥ 7b80dcf343d45088931d16a6c9ba2fd975138a0b, < b371f8f6d89ec8dfea796e00a44a57c44fc8fcc0 | ≥ 366e77cd4923c3aa45341e15dcaf3377af9b042f, < 9984db63742099ee3f3cff35cf71306d10e64356 | ≥ 6.12.25, < 6.12.29 | ≥ 6.14.4, < 6.14.7
  • linux_kernel≥ 6.12.25, < 6.12.29 | ≥ 6.14.4, < 6.14.7 | 6.15:rc2 | 6.15:rc3 | 6.15:rc4 | 6.15:rc5
Debian1 product
  • linux< 6.12.29-1

3 vendors · 88 products

References

10 links