2025-04-16 05:02:29 +00:00
{
2025-05-08 07:00:38 +00:00
"data_version" : "4.0" ,
2025-04-16 05:02:29 +00:00
"data_type" : "CVE" ,
"data_format" : "MITRE" ,
"CVE_data_meta" : {
"ID" : "CVE-2025-37810" ,
2025-05-08 07:00:38 +00:00
"ASSIGNER" : "cve@kernel.org" ,
"STATE" : "PUBLIC"
2025-04-16 05:02:29 +00:00
} ,
"description" : {
"description_data" : [
{
"lang" : "eng" ,
2025-05-08 07:00:38 +00:00
"value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: dwc3: gadget: check that event count does not exceed event buffer length\n\nThe event count is read from register DWC3_GEVNTCOUNT.\nThere is a check for the count being zero, but not for exceeding the\nevent buffer length.\nCheck that event count does not exceed event buffer length,\navoiding an out-of-bounds access when memcpy'ing the event.\nCrash log:\nUnable to handle kernel paging request at virtual address ffffffc0129be000\npc : __memcpy+0x114/0x180\nlr : dwc3_check_event_buf+0xec/0x348\nx3 : 0000000000000030 x2 : 000000000000dfc4\nx1 : ffffffc0129be000 x0 : ffffff87aad60080\nCall trace:\n__memcpy+0x114/0x180\ndwc3_interrupt+0x24/0x34"
}
]
} ,
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng" ,
"value" : "n/a"
}
]
2025-04-16 05:02:29 +00:00
}
]
2025-05-08 07:00:38 +00:00
} ,
"affects" : {
"vendor" : {
"vendor_data" : [
{
"vendor_name" : "Linux" ,
"product" : {
"product_data" : [
{
"product_name" : "Linux" ,
"version" : {
"version_data" : [
{
"version_affected" : "<" ,
"version_name" : "72246da40f3719af3bfd104a2365b32537c27d83" ,
"version_value" : "015c39f38e69a491d2abd5e98869a500a9459b3b"
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "3.2" ,
"status" : "affected"
} ,
{
"version" : "0" ,
"lessThan" : "3.2" ,
"status" : "unaffected" ,
"versionType" : "semver"
} ,
{
"version" : "5.4.293" ,
"lessThanOrEqual" : "5.4.*" ,
"status" : "unaffected" ,
"versionType" : "semver"
} ,
{
"version" : "5.10.237" ,
"lessThanOrEqual" : "5.10.*" ,
"status" : "unaffected" ,
"versionType" : "semver"
} ,
{
"version" : "5.15.181" ,
"lessThanOrEqual" : "5.15.*" ,
"status" : "unaffected" ,
"versionType" : "semver"
} ,
{
"version" : "6.1.136" ,
"lessThanOrEqual" : "6.1.*" ,
"status" : "unaffected" ,
"versionType" : "semver"
} ,
{
"version" : "6.6.89" ,
"lessThanOrEqual" : "6.6.*" ,
"status" : "unaffected" ,
"versionType" : "semver"
} ,
{
"version" : "6.12.26" ,
"lessThanOrEqual" : "6.12.*" ,
"status" : "unaffected" ,
"versionType" : "semver"
} ,
{
"version" : "6.14.5" ,
"lessThanOrEqual" : "6.14.*" ,
"status" : "unaffected" ,
"versionType" : "semver"
} ,
{
"version" : "6.15-rc4" ,
"lessThanOrEqual" : "*" ,
"status" : "unaffected" ,
"versionType" : "original_commit_for_fix"
}
] ,
"defaultStatus" : "affected"
}
}
]
}
}
]
}
}
]
}
} ,
"references" : {
"reference_data" : [
{
"url" : "https://git.kernel.org/stable/c/015c39f38e69a491d2abd5e98869a500a9459b3b" ,
"refsource" : "MISC" ,
"name" : "https://git.kernel.org/stable/c/015c39f38e69a491d2abd5e98869a500a9459b3b"
} ,
{
"url" : "https://git.kernel.org/stable/c/b43225948b231b3f331194010f84512bee4d9f59" ,
"refsource" : "MISC" ,
"name" : "https://git.kernel.org/stable/c/b43225948b231b3f331194010f84512bee4d9f59"
} ,
{
"url" : "https://git.kernel.org/stable/c/c0079630f268843a25ed75226169cba40e0d8880" ,
"refsource" : "MISC" ,
"name" : "https://git.kernel.org/stable/c/c0079630f268843a25ed75226169cba40e0d8880"
} ,
{
"url" : "https://git.kernel.org/stable/c/a44547015287a19001384fe94dbff84c92ce4ee1" ,
"refsource" : "MISC" ,
"name" : "https://git.kernel.org/stable/c/a44547015287a19001384fe94dbff84c92ce4ee1"
} ,
{
"url" : "https://git.kernel.org/stable/c/c4d80e41cb42008dceb35e5dbf52574d93beac0d" ,
"refsource" : "MISC" ,
"name" : "https://git.kernel.org/stable/c/c4d80e41cb42008dceb35e5dbf52574d93beac0d"
} ,
{
"url" : "https://git.kernel.org/stable/c/52a7c9d930b95aa8b1620edaba4818040c32631f" ,
"refsource" : "MISC" ,
"name" : "https://git.kernel.org/stable/c/52a7c9d930b95aa8b1620edaba4818040c32631f"
} ,
{
"url" : "https://git.kernel.org/stable/c/99d655119b870ee60e4dbf310aa9a1ed8d9ede3d" ,
"refsource" : "MISC" ,
"name" : "https://git.kernel.org/stable/c/99d655119b870ee60e4dbf310aa9a1ed8d9ede3d"
} ,
{
"url" : "https://git.kernel.org/stable/c/63ccd26cd1f6600421795f6ca3e625076be06c9f" ,
"refsource" : "MISC" ,
"name" : "https://git.kernel.org/stable/c/63ccd26cd1f6600421795f6ca3e625076be06c9f"
}
]
} ,
"generator" : {
"engine" : "bippy-1.2.0"
2025-04-16 05:02:29 +00:00
}
}