What is CVE-2025-37818?

CVE-2025-37818 is a Medium severity Linux kernel vulnerability with a CVSS score of 5.5 out of 10, classified as a NULL Pointer Dereference flaw (CWE-476), affecting Linux kernel versions from 5.19 onward and patched in 6.1.136, 6.6.89, 6.12.26 and others. CVE-2025-37818 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2025-37818?

CVE-2025-37818 has a CVSS score of 5.5 out of 10, rated Medium severity. The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Is there a patch available for CVE-2025-37818?

Yes, CVE-2025-37818 has been patched. Fixed versions include 6.1.136, 6.6.89, 6.12.26 and others. If you are running Linux kernel 5.19 or later up to the fix versions, apply the relevant patch for your kernel branch.

Is CVE-2025-37818 actively exploited?

CVE-2025-37818 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is NULL Pointer Dereference (CWE-476)?

The product dereferences a pointer that it expects to be valid but is NULL, typically causing a crash. See MITRE CWE for full details: https://cwe.mitre.org/data/definitions/476.html

CVE-2025-37818

Medium

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Return NULL from huge_pte_offset() for invalid PMD LoongArch's huge_pte_offset() currently returns a pointer to a PMD slot even if the underlying entry points to invalid_pte_table (indicating no mapping). Callers like smaps_hugetlb_range() fetch this invalid entry value (the address of invalid_pte_table) via this pointer. The generic is_swap_pte() check then incorrectly identifies this address as a swap entry on LoongArch, because it satisfies the "!pte_present() && !pte_none()" conditions. This misinterpretation, combined with a coincidental match by is_migration_entry() on the address bits, leads to kernel crashes in pfn_swap_entry_to_page(). Fix this at the architecture level by modifying huge_pte_offset() to check the PMD entry's content using pmd_none() before returning. If the entry is invalid (i.e., it points to invalid_pte_table), return NULL instead of the pointer to the slot.

Package Linux Kernel

Published 2025-05-08

Last modified 2025-11-12

CVSS version 3.1

Patch available

Yes

CVSS 3.1 score

5.5

out of 10

Medium

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

High

Vector string

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness type

CWE-476

CVE-2025-37818 is a NULL Pointer Dereference vulnerability

What is NULL Pointer Dereference?

The product dereferences a pointer that it expects to be valid but is NULL, typically causing a crash. Learn more on MITRE CWE

Affected versions

Linux kernel versions 5.19 and later are affected. Fixed in 6.1.136, 6.6.89, 6.12.26, 6.14.5, 6.15 and their respective stable series.

Affected from

≥ 5.19

Fixed in

✓ 6.1.136 6.1.x ✓ 6.6.89 6.6.x ✓ 6.12.26 6.12.x ✓ 6.14.5 6.14.x ✓ 6.15

References

6 total

Kernel Git
https://git.kernel.org/stable/c/2ca9380b12711afe95b3589bd82b59623b3c96b3

Patch
Kernel Git
https://git.kernel.org/stable/c/34256805720993e37adf6127371a1265aea8376a

Patch
Kernel Git
https://git.kernel.org/stable/c/51424fd171cee6a33f01f7c66b8eb23ac42289d4

Patch
Kernel Git
https://git.kernel.org/stable/c/b49f085cd671addbda4802d6b9382513f7dd0f30

Patch
Kernel Git
https://git.kernel.org/stable/c/bd51834d1cf65a2c801295d230c220aeebf87a73

Patch

Showing 5 of 6 references View all on NVD

Details

CVE ID CVE-2025-37818

Severity Medium

CVSS score 5.5 / 10

CVSS version 3.1

Published 2025-05-08

Modified 2025-11-12

KEV No

Patch

Yes

Package linux

Frequently asked questions

What is CVE-2025-37818?

CVE-2025-37818 is a Medium severity Linux kernel vulnerability with a CVSS score of 5.5 out of 10 , classified as a NULL Pointer Dereference flaw (CWE-476) . It affects Linux kernel versions from 5.19 onward and has been patched in 6.1.136, 6.6.89, 6.12.26 and others. CVE-2025-37818 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
What is the CVSS score for CVE-2025-37818?

CVE-2025-37818 has a CVSS score of 5.5 out of 10, rated Medium severity (CVSS 3.1). The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.
Is there a patch available for CVE-2025-37818?

Yes. CVE-2025-37818 has been patched. Fixed versions include 6.1.136, 6.6.89, 6.12.26 and others. If you are running Linux kernel 5.19 or later up to the fix versions, apply the relevant patch for your kernel branch.
Is CVE-2025-37818 actively exploited?

No. CVE-2025-37818 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.