5.5

CVE-2025-37883

s390/sclp: Add check for get_zeroed_page()

In the Linux kernel, the following vulnerability has been resolved:

s390/sclp: Add check for get_zeroed_page()

Add check for the return value of get_zeroed_page() in
sclp_console_init() to prevent null pointer dereference.
Furthermore, to solve the memory leak caused by the loop
allocation, add a free helper to do the free job.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version < 5.15.181
Linux ≫ Linux Kernel Version >= 5.16 < 6.1.136
Linux ≫ Linux Kernel Version >= 6.2 < 6.6.89
Linux ≫ Linux Kernel Version >= 6.7 < 6.12.26
Linux ≫ Linux Kernel Version >= 6.13 < 6.14.5
Debian ≫ Debian Linux Version11.0
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.23% 0.143
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

https://git.kernel.org/stable/c/e1e00dc45648125ef7cb87ebc3b581ac224e7b39
Patch
https://git.kernel.org/stable/c/397254706eba9d8f99fd237feede7ab3169a7f9a
Patch
https://git.kernel.org/stable/c/28e5a867aa542e369e211c2baba7044228809a99
Patch
https://git.kernel.org/stable/c/3b3aa72636a6205933609ec274a8747720c1ee3f
Patch
https://git.kernel.org/stable/c/f69f8a93aacf6e99af7b1cc992d8ca2cc07b96fb
Patch
https://git.kernel.org/stable/c/3db42c75a921854a99db0a2775814fef97415bac
Patch
https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html
Third Party Advisory
Mailing List