CVE-2025-37977

CVE-2025-37977

High · published May 20, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
9.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

scsi: ufs: exynos: Disable iocc if dma-coherent property isn't set

If dma-coherent property isn't set then descriptors are non-cacheable

and the iocc shareability bits should be disabled. Without this UFS can

end up in an incompatible configuration and suffer from random cache

related stability issues.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00199 · 9.2th percentile
Published
2025-05-20T21:15Z
Affected products (4)
ProductVersionsFixed in
linux/linux_kernel≥ 5.16, < 6.12.266.12.26
linux/linux_kernel≥ 6.13, < 6.14.46.14.4
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (4)
https://git.kernel.org/stable/c/869749e48115ef944eeabec8e84138908471fa51 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/b101fc9ac18d1ac434b703839a5117342a591792 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/f0c6728a6f2e269ebb234a9b5bb6c2c24aafeb51 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/f92bb7436802f8eb7ee72dc911a33c8897fde366 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 20 MAY 16:58Z
    scsi: ufs: exynos: Disable iocc if dma-coherent property isn't set
    cvelistv5