01 Record

CVE-2025-37857

scsi: st: Fix array overflow in st_setup()

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

scsi: st: Fix array overflow in st_setup()

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.31% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 24.0% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Analyzed. NVD last modified this record on 2026-06-17.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-05-09 06:42Z1 YR AGO

Last updated

2026-05-11 21:16Z5 MO AGO

Reserved

2025-04-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-190Integer Overflow or WraparoundBase
CWE-131Incorrect Calculation of Buffer SizeBase

Data version

5.2

Document digest

34e0ed825ee47756de93012ef2079db759a61e44cf64cf227752ded603ce73b1

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux2bec708a88ce053ffcb0dd8e373d1e46c6dc38a4 to < 736ae988bfb5932c05625baff70fba224d547c08, 2bec708a88ce053ffcb0dd8e373d1e46c6dc38a4 to < 574b399a7fb6ae71c97e26d122205c4a720c0e43, 2bec708a88ce053ffcb0dd8e373d1e46c6dc38a4 to < c6015d0f7a2236ddb3928b2dfcb1c556a1368b55, 2bec708a88ce053ffcb0dd8e373d1e46c6dc38a4 to < f746fe0c51e044d1248dc67918328bfb3d86b639, 2bec708a88ce053ffcb0dd8e373d1e46c6dc38a4 to < e4d1ca0a84a6650d3172eb8c07ef2fbc585b0d96, 2bec708a88ce053ffcb0dd8e373d1e46c6dc38a4 to < 7fe3b4deed8b93609058c37c9a11df1d2b2c0423, 2bec708a88ce053ffcb0dd8e373d1e46c6dc38a4 to < e6b585d016c47ca8a37b92ea8a3fe35c0b585256, 2bec708a88ce053ffcb0dd8e373d1e46c6dc38a4 to < ad4c3037dc77739a625246a2a0fb23b8f3402c06, 2bec708a88ce053ffcb0dd8e373d1e46c6dc38a4 to < a018d1cf990d0c339fe0e29b762ea5dc10567d67, 3.19—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/736ae988bfb5932c05625baff70fba224d547c08
git.kernel.orghttps://git.kernel.org/stable/c/574b399a7fb6ae71c97e26d122205c4a720c0e43
git.kernel.orghttps://git.kernel.org/stable/c/c6015d0f7a2236ddb3928b2dfcb1c556a1368b55
git.kernel.orghttps://git.kernel.org/stable/c/f746fe0c51e044d1248dc67918328bfb3d86b639
git.kernel.orghttps://git.kernel.org/stable/c/e4d1ca0a84a6650d3172eb8c07ef2fbc585b0d96
git.kernel.orghttps://git.kernel.org/stable/c/7fe3b4deed8b93609058c37c9a11df1d2b2c0423
git.kernel.orghttps://git.kernel.org/stable/c/e6b585d016c47ca8a37b92ea8a3fe35c0b585256
git.kernel.orghttps://git.kernel.org/stable/c/ad4c3037dc77739a625246a2a0fb23b8f3402c06
git.kernel.orghttps://git.kernel.org/stable/c/a018d1cf990d0c339fe0e29b762ea5dc10567d67
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/05/msg00045.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/05/msg00030.html

07 Fixed in

Debian 12

linux
Fixed in 6.1.135-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.25-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.12.25-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.