CVE-2025-37773

virtiofs: add filesystem context source name check

State: Published
Severity: Not scored
Published: May 1, 2025
Updated: May 11, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

virtiofs: add filesystem context source name check

In certain scenarios, for example, during fuzz testing, the source name may be NULL, which could lead to a kernel panic. Therefore, an extra check for the source name should be added.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	a62a8ef9d97da23762a588592c8b8eb50a8deb6a to before b84f13fdad10a543e2e65bab7e81b3f0bceabd67Affected a62a8ef9d97da23762a588592c8b8eb50a8deb6a to before 9d6dcf18a1b49990295ac8a05fd9bdfd27ccbf88Affected a62a8ef9d97da23762a588592c8b8eb50a8deb6a to before 5ee09cdaf3414f6c92960714af46d3d90eede2f3Affected a62a8ef9d97da23762a588592c8b8eb50a8deb6a to before 599d1e2a6aecc44acf22fe7ea6f5e84a7e526abeAffected a62a8ef9d97da23762a588592c8b8eb50a8deb6a to before f6ec52710dc5e156b774cbef5d0f5c99b1c53a80Affected a62a8ef9d97da23762a588592c8b8eb50a8deb6a to before c3e31d613951c299487844c4d1686a933e8ee291Affected a62a8ef9d97da23762a588592c8b8eb50a8deb6a to before a648d80f8d9b208beee03a2d9aa690cfacf1d41eAffected a62a8ef9d97da23762a588592c8b8eb50a8deb6a to before a94fd938df2b1628da66b498aa0eeb89593bc7a2Affected
LinuxLinux	5.4Affected before 5.4Not affected 5.4.293 through 5.4.Not affected 5.10.237 through 5.10.Not affected 5.15.181 through 5.15.Not affected 6.1.135 through 6.1.Not affected 6.6.88 through 6.6.Not affected 6.12.25 through 6.12.Not affected 6.14.4 through 6.14.*Not affected 6.15 and laterNot affected

Product

Versions

LinuxLinux

a62a8ef9d97da23762a588592c8b8eb50a8deb6a to before b84f13fdad10a543e2e65bab7e81b3f0bceabd67Affected
a62a8ef9d97da23762a588592c8b8eb50a8deb6a to before 9d6dcf18a1b49990295ac8a05fd9bdfd27ccbf88Affected
a62a8ef9d97da23762a588592c8b8eb50a8deb6a to before 5ee09cdaf3414f6c92960714af46d3d90eede2f3Affected
a62a8ef9d97da23762a588592c8b8eb50a8deb6a to before 599d1e2a6aecc44acf22fe7ea6f5e84a7e526abeAffected
a62a8ef9d97da23762a588592c8b8eb50a8deb6a to before f6ec52710dc5e156b774cbef5d0f5c99b1c53a80Affected
a62a8ef9d97da23762a588592c8b8eb50a8deb6a to before c3e31d613951c299487844c4d1686a933e8ee291Affected
a62a8ef9d97da23762a588592c8b8eb50a8deb6a to before a648d80f8d9b208beee03a2d9aa690cfacf1d41eAffected
a62a8ef9d97da23762a588592c8b8eb50a8deb6a to before a94fd938df2b1628da66b498aa0eeb89593bc7a2Affected

LinuxLinux

5.4Affected
before 5.4Not affected
5.4.293 through 5.4.*Not affected
5.10.237 through 5.10.*Not affected
5.15.181 through 5.15.*Not affected
6.1.135 through 6.1.*Not affected
6.6.88 through 6.6.*Not affected
6.12.25 through 6.12.*Not affected
6.14.4 through 6.14.*Not affected
6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.