01 Record

CVE-2025-37817

mcb: fix a double free bug in chameleon_parse_gdd()

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

mcb: fix a double free bug in chameleon_parse_gdd()

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.20% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 10.1% of scored records. A rank, not a probability.
NVD base score: 7.8 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD analysis status: Analyzed. NVD last modified this record on 2026-06-17.
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-05-08 06:26Z1 YR AGO

Last updated

2026-05-11 21:15Z3 MO AGO

Reserved

2025-04-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-415Double FreeVariant

Data version

5.2

Document digest

979f250b65f8492b7b2e37e62da299ed4b1bbc271fd55e4f55e0b6dead39c583

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux3764e82e5150d87b205c10cd78a9c9ab86fbfa51 to < d70184958b0ea8c0fd52e2b456654b503e769fc8, 3764e82e5150d87b205c10cd78a9c9ab86fbfa51 to < 4ffe8c9fb561e4427dd1a3056cd5b3685b74f78d, 3764e82e5150d87b205c10cd78a9c9ab86fbfa51 to < 59f993cd36b6e28a394ba3d977e8ffe5c9884e3b, 3764e82e5150d87b205c10cd78a9c9ab86fbfa51 to < c5b8a549ef1fcc6066b037a3962c79d60465ba0b, 3764e82e5150d87b205c10cd78a9c9ab86fbfa51 to < 96838eb1836fd372e42be5db84f0b333b65146a6, 3764e82e5150d87b205c10cd78a9c9ab86fbfa51 to < df1a5d5c6134224f9298e5189230f9d29ae50cac, 3764e82e5150d87b205c10cd78a9c9ab86fbfa51 to < bcc7d58ee5173e34306026bd01e1fbf75e169d37, 3764e82e5150d87b205c10cd78a9c9ab86fbfa51 to < 7c7f1bfdb2249f854a736d9b79778c7e5a29a150, 3.15—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/d70184958b0ea8c0fd52e2b456654b503e769fc8
git.kernel.orghttps://git.kernel.org/stable/c/4ffe8c9fb561e4427dd1a3056cd5b3685b74f78d
git.kernel.orghttps://git.kernel.org/stable/c/59f993cd36b6e28a394ba3d977e8ffe5c9884e3b
git.kernel.orghttps://git.kernel.org/stable/c/c5b8a549ef1fcc6066b037a3962c79d60465ba0b
git.kernel.orghttps://git.kernel.org/stable/c/96838eb1836fd372e42be5db84f0b333b65146a6
git.kernel.orghttps://git.kernel.org/stable/c/df1a5d5c6134224f9298e5189230f9d29ae50cac
git.kernel.orghttps://git.kernel.org/stable/c/bcc7d58ee5173e34306026bd01e1fbf75e169d37
git.kernel.orghttps://git.kernel.org/stable/c/7c7f1bfdb2249f854a736d9b79778c7e5a29a150
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/05/msg00045.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/05/msg00030.html

01 Record index

CVE-2025-37817

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2025-37817

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References