CVE-2025-37975

HIGH

Linux Kernel - Out-of-bounds Read in RISC-V Module Relocation Handler

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: riscv: module: Fix out-of-bounds relocation access The current code allows rel[j] to access one element past the end of the relocation section. Simplify to num_relocations which is equivalent to the existing size expression.

References (3)

Core 3

Core References

Patch

https://git.kernel.org/stable/c/a068ea00009d373d825c528f9c168501519211b4

Patch

https://git.kernel.org/stable/c/95e4e1c1cf614d125f159db9726b7abb32e18385

Patch

https://git.kernel.org/stable/c/0b4cce68efb93e31a8e51795d696df6e379cb41c

Scores

CVSS v3 7.1

EPSS 0.0015

EPSS Percentile 4.5%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Details

CWE

CWE-125

Status published

Products (12)

linux/Kernel 6.13.0 - 6.14.4linux

linux/Kernel 6.8.0 - 6.12.25linux

Linux/Linux < 6.8

Linux/Linux 080c4324fa5e81ff3780206a138223abfb57a68e - 0b4cce68efb93e31a8e51795d696df6e379cb41c

Linux/Linux 080c4324fa5e81ff3780206a138223abfb57a68e - 95e4e1c1cf614d125f159db9726b7abb32e18385

Linux/Linux 080c4324fa5e81ff3780206a138223abfb57a68e - a068ea00009d373d825c528f9c168501519211b4

Linux/Linux 6.12.25 - 6.12.*

Linux/Linux 6.14.4 - 6.14.*

Linux/Linux 6.15

Linux/Linux 6.8

... and 2 more

Published May 20, 2025

Tracked Since Feb 18, 2026