CVE-2025-37950

Medium

Description

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix panic in failed foilio allocation commit 7e119cff9d0a ("ocfs2: convert w_pages to w_folios") and commit 9a5e08652dc4b ("ocfs2: use an array of folios instead of an array of pages") save -ENOMEM in the folio array upon allocation failure and call the folio array free code. The folio array free code expects either valid folio pointers or NULL. Finding the -ENOMEM will result in a panic. Fix by NULLing the error folio entry.

SeverityMedium
CVSS5.5
Exploit probability—
ProductLinux Kernel
PublishedMay 20, 2025
First seenMay 20, 2025

How to fix

Update
  • linux linux_kernel6.14.7 or later

Affected products

ProductAffected versionsFixed in
linux linux_kernel6.14 ≤ v < 6.14.7, 6.156.14.7

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2025-37950 · Linux Kernel · Dark Radar