In the Linux kernel, the following vulnerability has been resolved:

crypto: null - Use spin lock instead of mutex

As the null algorithm may be freed in softirq context through
af_alg, use spin locks instead of mutexes to protect the default
null algorithm.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00025.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
330234638e16b7b95e8e5e6be719a61a93f074b8 affected < f7a5a5c8e1ec16a4b2041398abe95de0e14572ef
330234638e16b7b95e8e5e6be719a61a93f074b8 affected < e307c54ac8198bf09652c72603ba6e6d97798410
330234638e16b7b95e8e5e6be719a61a93f074b8 affected < 1dd4a8561d85dea545cf93f56efc48df8176e218
330234638e16b7b95e8e5e6be719a61a93f074b8 affected < e27244cbe10658a66b8775be7f0acc4ad2f618d6
330234638e16b7b95e8e5e6be719a61a93f074b8 affected < 1b66a5920b7fc7cc6251192a3fcad115b6d75dd5
330234638e16b7b95e8e5e6be719a61a93f074b8 affected < 0486de3c1b8223138dcc614846bd76364f758de6
330234638e16b7b95e8e5e6be719a61a93f074b8 affected < 8cf2945512a8c0ef74ddd5b5a4f6b6a2fb1a4efb
330234638e16b7b95e8e5e6be719a61a93f074b8 affected < dcc47a028c24e793ce6d6efebfef1a1e92f80297
Linux Linux affected
Version Status Constraints
4.2 affected —
0 unaffected < 4.2
5.4.293 unaffected ≤ 5.4.*
5.10.237 unaffected ≤ 5.10.*
5.15.181 unaffected ≤ 5.15.*
6.1.136 unaffected ≤ 6.1.*
6.6.89 unaffected ≤ 6.6.*
6.12.26 unaffected ≤ 6.12.*
6.14.5 unaffected ≤ 6.14.*
6.15 unaffected ≤ *

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Configuration 2 [-]

cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

No data.

No data.

Project Subscriptions

Vendors Products
Debian Subscribe
Debian Linux Subscribe
Linux Subscribe
Linux Kernel Subscribe
Advisories
Source ID Title
Debian DLA Debian DLA DLA-4178-1 linux security update
Debian DLA Debian DLA DLA-4193-1 linux-6.1 security update
EUVD EUVD EUVD-2025-13983 In the Linux kernel, the following vulnerability has been resolved: crypto: null - Use spin lock instead of mutex As the null algorithm may be freed in softirq context through af_alg, use spin locks instead of mutexes to protect the default null algorithm.
Ubuntu USN Ubuntu USN USN-7594-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7594-2 Linux kernel (Azure) vulnerabilities
Ubuntu USN Ubuntu USN USN-7594-3 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7654-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7654-2 Linux kernel (Real-time) vulnerabilities
Ubuntu USN Ubuntu USN USN-7654-3 Linux kernel (FIPS) vulnerabilities
Ubuntu USN Ubuntu USN USN-7654-4 Linux kernel (KVM) vulnerabilities
Ubuntu USN Ubuntu USN USN-7654-5 Linux kernel (Xilinx ZynqMP) vulnerabilities
Ubuntu USN Ubuntu USN USN-7655-1 Linux kernel (Intel IoTG) vulnerabilities
Ubuntu USN Ubuntu USN USN-7686-1 Linux kernel (Raspberry Pi) vulnerabilities
Ubuntu USN Ubuntu USN USN-7711-1 Linux kernel (Azure) vulnerabilities
Ubuntu USN Ubuntu USN USN-7712-1 Linux kernel (Azure FIPS) vulnerabilities
Ubuntu USN Ubuntu USN USN-7712-2 Linux kernel (Azure) vulnerabilities
Ubuntu USN Ubuntu USN USN-8028-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-8028-2 Linux kernel (Real-time) vulnerabilities
Ubuntu USN Ubuntu USN USN-8031-1 Linux kernel (GCP) vulnerabilities
Ubuntu USN Ubuntu USN USN-8028-3 Linux kernel (Real-time) vulnerabilities
Ubuntu USN Ubuntu USN USN-8028-4 Linux kernel (FIPS) vulnerabilities
Ubuntu USN Ubuntu USN USN-8028-5 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-8031-2 Linux kernel (GCP FIPS) vulnerabilities
Ubuntu USN Ubuntu USN USN-8028-6 Linux kernel (HWE) vulnerabilities
Ubuntu USN Ubuntu USN USN-8031-3 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-8052-1 Linux kernel (Low Latency) vulnerabilities
Ubuntu USN Ubuntu USN USN-8028-7 Linux kernel (Low Latency NVIDIA) vulnerabilities
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/0486de3c1b8223138dcc614846bd76364f758de6 cve-icon cve-icon
https://git.kernel.org/stable/c/1b66a5920b7fc7cc6251192a3fcad115b6d75dd5 cve-icon cve-icon
https://git.kernel.org/stable/c/1dd4a8561d85dea545cf93f56efc48df8176e218 cve-icon cve-icon
https://git.kernel.org/stable/c/8cf2945512a8c0ef74ddd5b5a4f6b6a2fb1a4efb cve-icon cve-icon
https://git.kernel.org/stable/c/dcc47a028c24e793ce6d6efebfef1a1e92f80297 cve-icon cve-icon
https://git.kernel.org/stable/c/e27244cbe10658a66b8775be7f0acc4ad2f618d6 cve-icon cve-icon
https://git.kernel.org/stable/c/e307c54ac8198bf09652c72603ba6e6d97798410 cve-icon cve-icon
https://git.kernel.org/stable/c/f7a5a5c8e1ec16a4b2041398abe95de0e14572ef cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html cve-icon
https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html cve-icon
https://lore.kernel.org/linux-cve-announce/2025050816-CVE-2025-37808-57bb@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-37808 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-37808 cve-icon
History

Mon, 10 Nov 2025 17:45:00 +0000

Type Values Removed Values Added
First Time appeared Debian
Debian debian Linux
Linux
Linux linux Kernel
Weaknesses NVD-CWE-noinfo
CPEs cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Debian
Debian debian Linux
Linux
Linux linux Kernel

Mon, 03 Nov 2025 20:30:00 +0000

Type Values Removed Values Added
References

Tue, 15 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.00035}

 epss

{'score': 0.00036}

Fri, 09 May 2025 02:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Thu, 08 May 2025 06:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: crypto: null - Use spin lock instead of mutex As the null algorithm may be freed in softirq context through af_alg, use spin locks instead of mutexes to protect the default null algorithm.
Title crypto: null - Use spin lock instead of mutex
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-11-03T19:55:38.177Z

Reserved: 2025-04-16T04:51:23.942Z

Link: CVE-2025-37808

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2025-05-08T07:15:51.973

Modified: 2025-11-10T17:31:43.270

Link: CVE-2025-37808

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-05-08T00:00:00Z

Links: CVE-2025-37808 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses