CVE-2025-37997: debian debian_linux Improper Locking

CVSS: 7.8v3.1HighModified

AliasesUBUNTU-CVE-2025-37997DEBIAN-CVE-2025-37997

Published 29-05-2025Last modified 15-10-2026

Vulnerability summary

CVE-2025-37997 is a high (CVSS 7.8) Improper Locking vulnerability in debian debian_linux. EPSS estimates a 0.17% chance of exploitation in the next 30 days, higher than 6.4% of scored vulnerabilities.

Overall risk

31/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.8/10

010

High · v3.1 (CVE.org)

EPSS score

0.17%

0%100%

Low · +0.01 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Timeline

29-05-2025
PublishedVulnerability first disclosed.
15-10-2026
Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix region locking in hash types Region locking introduced in v5.6-rc4 contained three macros to handle the region locks: ahash_bucket_start(), ahash_bucket_end() which gave back the start and end hash bucket values belonging to a given region lock and ahash_region() which should give back the region lock belonging to a given hash bucket. The latter was incorrect which can lead to a race condition between the garbage collector and adding new elements when a hash type of set is defined with timeouts.

CVSS metrics

4 scores · 4 sources · 1 version

v3.17.8

EPSS trend

Probability

0.17%

Chance of exploitation in the next 30 days

Percentile

Versus all other CVEs

30-day change

+0.01 pp

From 0.17% on 19-09-2026

19-09-202619-10-2026

EPSS score

0.17%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-667Improper LockingThe product does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors.

Affected systems

Ubuntu138 products

linux< 5.4.0-219.239 | < 5.15.0-143.153 | < 6.8.0-63.66
linux-allwinner-5.19All versions (No fix recorded)
linux-aws< 5.4.0-1148.158 | < 5.15.0-1087.94 | < 6.8.0-1031.33
linux-aws-5.0All versions (No fix recorded)
linux-aws-5.11All versions (No fix recorded)

linux-aws-5.13All versions (No fix recorded)
linux-aws-5.15< 5.15.0-1087.94~20.04.1
linux-aws-5.19All versions (No fix recorded)
linux-aws-5.3All versions (No fix recorded)
linux-aws-5.4< 5.4.0-1148.158~18.04.1
linux-aws-5.8All versions (No fix recorded)
linux-aws-6.14< 6.14.0-1009.9~24.04.1
linux-aws-6.2All versions (No fix recorded)
linux-aws-6.5All versions (No fix recorded)
linux-aws-6.8< 6.8.0-1031.33~22.04.1
linux-aws-fips< 5.4.0-1148.158+fips1 | All versions (No fix recorded) | < 5.15.0-1087.94+fips1
linux-azureAll versions (No fix recorded) | < 5.4.0-1153.160 | < 5.15.0-1092.101 | < 6.8.0-1031.36
linux-azure-5.11All versions (No fix recorded)
linux-azure-5.13All versions (No fix recorded)
linux-azure-5.15< 5.15.0-1094.103~20.04.1
linux-azure-5.19All versions (No fix recorded)
linux-azure-5.3All versions (No fix recorded)
linux-azure-5.4< 5.4.0-1153.160~18.04.1
linux-azure-5.8All versions (No fix recorded)
linux-azure-6.11< 6.11.0-1018.18~24.04.1
linux-azure-6.2All versions (No fix recorded)
linux-azure-6.5All versions (No fix recorded)
linux-azure-6.8< 6.8.0-1031.36~22.04.1
linux-azure-edgeAll versions (No fix recorded)
linux-azure-fdeAll versions (No fix recorded) | < 5.15.0-1092.101.1
linux-azure-fde-5.19All versions (No fix recorded)
linux-azure-fde-6.2All versions (No fix recorded)
linux-azure-fips< 5.4.0-1154.161+fips1 | All versions (No fix recorded) | < 5.15.0-1094.103+fips1
linux-azure-nvidia< 6.8.0-1019.20
linux-bluefield< 5.4.0-1107.114 | < 5.15.0-1070.72
linux-fips< 5.4.0-1122.132 | All versions (No fix recorded) | < 5.15.0-143.153+fips1 | < 6.8.0-78.78+fips1
linux-gcpAll versions (No fix recorded) | < 5.4.0-1151.160 | < 5.15.0-1086.95 | < 6.8.0-1032.34
linux-gcp-5.11All versions (No fix recorded)
linux-gcp-5.13All versions (No fix recorded)
linux-gcp-5.15< 5.15.0-1086.95~20.04.1
linux-gcp-5.19All versions (No fix recorded)
linux-gcp-5.3All versions (No fix recorded)
linux-gcp-5.4< 5.4.0-1151.160~18.04.1
linux-gcp-5.8All versions (No fix recorded)
linux-gcp-6.11< 6.11.0-1017.17~24.04.1
linux-gcp-6.14< 6.14.0-1011.11~24.04.1
linux-gcp-6.2All versions (No fix recorded)
linux-gcp-6.5All versions (No fix recorded)
linux-gcp-6.8< 6.8.0-1032.34~22.04.1
linux-gcp-fips< 5.4.0-1151.160+fips1 | All versions (No fix recorded) | < 5.15.0-1086.95+fips1
linux-gkeAll versions (No fix recorded) | < 5.15.0-1084.90 | < 6.8.0-1027.31
linux-gke-4.15All versions (No fix recorded)
linux-gke-5.15All versions (No fix recorded)
linux-gke-5.4All versions (No fix recorded)
linux-gkeopAll versions (No fix recorded) | < 5.15.0-1069.77 | < 6.8.0-1014.16
linux-gkeop-5.15All versions (No fix recorded)
linux-gkeop-5.4All versions (No fix recorded)
linux-hweAll versions (No fix recorded)
linux-hwe-5.11All versions (No fix recorded)
linux-hwe-5.13All versions (No fix recorded)
linux-hwe-5.15< 5.15.0-143.153~20.04.1
linux-hwe-5.19All versions (No fix recorded)
linux-hwe-5.4< 5.4.0-219.239~18.04.1
linux-hwe-5.8All versions (No fix recorded)
linux-hwe-6.11< 6.11.0-29.29~24.04.1
linux-hwe-6.2All versions (No fix recorded)
linux-hwe-6.5All versions (No fix recorded)
linux-hwe-6.8< 6.8.0-64.67~22.04.1
linux-hwe-edgeAll versions (No fix recorded)
linux-ibm< 5.4.0-1094.99 | < 5.15.0-1079.82 | < 6.8.0-1028.28
linux-ibm-5.15< 5.15.0-1079.82~20.04.1
linux-ibm-5.4< 5.4.0-1094.99~18.04.1
linux-ibm-6.8< 6.8.0-1028.28~22.04.1
linux-intel-5.13All versions (No fix recorded)
linux-intel-iot-realtimeAll versions (No fix recorded) | < 5.15.0-1080.82
linux-intel-iotg< 5.15.0-1082.88
linux-intel-iotg-5.15< 5.15.0-1083.89~20.04.1
linux-iot< 5.4.0-1052.55
linux-kvm< 5.4.0-1135.144 | < 5.15.0-1083.88
linux-lowlatency< 5.15.0-143.153 | < 6.8.0-63.66.1
linux-lowlatency-hwe-5.15< 5.15.0-143.153~20.04.1
linux-lowlatency-hwe-5.19All versions (No fix recorded)
linux-lowlatency-hwe-6.11< 6.11.0-1016.17~24.04.1
linux-lowlatency-hwe-6.2All versions (No fix recorded)
linux-lowlatency-hwe-6.5All versions (No fix recorded)
linux-lowlatency-hwe-6.8< 6.8.0-63.66.1~22.04.1
linux-nvidia< 5.15.0-1081.82 | < 6.8.0-1030.33
linux-nvidia-6.11< 6.11.0-1012.12
linux-nvidia-6.2All versions (No fix recorded)
linux-nvidia-6.5All versions (No fix recorded)
linux-nvidia-6.8< 6.8.0-1030.33~22.04.1
linux-nvidia-lowlatency< 6.8.0-1030.33.1
linux-nvidia-tegra< 5.15.0-1040.40 | < 6.8.0-1008.8
linux-nvidia-tegra-5.15< 5.15.0-1040.40~20.04.1
linux-nvidia-tegra-igx< 5.15.0-1029.29
linux-oemAll versions (No fix recorded)
linux-oem-5.10All versions (No fix recorded)
linux-oem-5.13All versions (No fix recorded)
linux-oem-5.14All versions (No fix recorded)
linux-oem-5.17All versions (No fix recorded)
linux-oem-5.6All versions (No fix recorded)
linux-oem-6.0All versions (No fix recorded)
linux-oem-6.1All versions (No fix recorded)
linux-oem-6.11< 6.11.0-1025.25
linux-oem-6.14< 6.14.0-1006.6
linux-oem-6.5All versions (No fix recorded)
linux-oem-6.8< 6.8.0-1030.30
linux-oracle< 5.4.0-1146.156 | < 5.15.0-1084.90 | < 6.8.0-1028.29
linux-oracle-5.0All versions (No fix recorded)
linux-oracle-5.11All versions (No fix recorded)
linux-oracle-5.13All versions (No fix recorded)
linux-oracle-5.15< 5.15.0-1084.90~20.04.1
linux-oracle-5.3All versions (No fix recorded)
linux-oracle-5.4< 5.4.0-1146.156~18.04.1
linux-oracle-5.8All versions (No fix recorded)
linux-oracle-6.14< 6.14.0-1009.9~24.04.1
linux-oracle-6.5All versions (No fix recorded)
linux-oracle-6.8< 6.8.0-1028.29~22.04.1
linux-raspi< 5.4.0-1131.144 | < 5.15.0-1083.86 | < 6.8.0-1030.34
linux-raspi-5.4< 5.4.0-1131.144~18.04.1
linux-raspi-realtimeAll versions (No fix recorded) | < 6.8.0-2025.26
linux-raspi2All versions (No fix recorded)
linux-realtimeAll versions (No fix recorded) | < 5.15.0-1087.96 | < 6.8.1-1024.25
linux-realtime-6.14< 6.14.0-1010.10~24.04.1
linux-realtime-6.8< 6.8.1-1024.25~22.04.1
linux-riscvAll versions (No fix recorded)
linux-riscv-5.11All versions (No fix recorded)
linux-riscv-5.15< 5.15.0-1082.86~20.04.1
linux-riscv-5.19All versions (No fix recorded)
linux-riscv-5.8All versions (No fix recorded)
linux-riscv-6.14< 6.14.0-23.23.1~24.04.1
linux-riscv-6.5All versions (No fix recorded)
linux-riscv-6.8< 6.8.0-63.66~22.04.1
linux-starfive-5.19All versions (No fix recorded)
linux-starfive-6.2All versions (No fix recorded)
linux-starfive-6.5All versions (No fix recorded)
linux-xilinx< 6.8.0-1017.18
linux-xilinx-zynqmp< 5.4.0-1066.70 | < 5.15.0-1051.55

Show all 138

Debian2 products

linux< 6.1.139-1 | < 6.12.29-1
debian_linuxEOL11.0

Linux2 products

linux≥ 5dd9488ae41070b69d2f4acb580f77db5705f9ca, < 00cfc5fad1491796942a948808afb968a0a3f35b | ≥ f66ee0410b1c3481ee75e5db9b34547b4d582465, < 226ce0ec38316d9e3739e73a64b6b8304646c658 | ≥ f66ee0410b1c3481ee75e5db9b34547b4d582465, < 82c1eb32693bc48251d92532975e19160987e5b9 | ≥ f66ee0410b1c3481ee75e5db9b34547b4d582465, < aa77294b0f73bb8265987591460cd25b8722c3df | ≥ f66ee0410b1c3481ee75e5db9b34547b4d582465, < a3dfec485401943e315c394c29afe2db8f9481d6 | ≥ f66ee0410b1c3481ee75e5db9b34547b4d582465, < e2ab67672b2288521a6146034a971f9a82ffc5c5 | ≥ f66ee0410b1c3481ee75e5db9b34547b4d582465, < 6e002ecc1c8cfdfc866b9104ab7888da54613e59 | ≥ f66ee0410b1c3481ee75e5db9b34547b4d582465, < 8478a729c0462273188263136880480729e9efca | a469bab3386aebff33c59506f3a95e35b91118fd | ≥ 5.4.24, < 5.4.294 | ≥ 5.5.8, < 5.6 | 5.6
linux_kernel≥ 5.4.24, < 5.4.294 | ≥ 5.5.8, < 5.6 | ≥ 5.6.1, < 5.10.238 | ≥ 5.11, < 5.15.183 | ≥ 5.16, < 6.1.139 | ≥ 6.2, < 6.6.91 | ≥ 6.7, < 6.12.29 | ≥ 6.13, < 6.14.7 | 5.6 | 5.6:rc4 | 5.6:rc5 | 5.6:rc6 | 5.6:rc7 | 6.15:rc1 | 6.15:rc2 | 6.15:rc3 | 6.15:rc4 | 6.15:rc5

3 vendors · 142 products