{"id":"CVE-2025-37773","title":"virtiofs: add filesystem context source name check","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nvirtiofs: add filesystem context source name check\n\nIn certain scenarios, for example, during fuzz testing, the source\nname may be NULL, which could lead to a kernel pa…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= a62a8ef9d97da23762a588592c8b8eb50a8deb6a < b84f13fdad10a543e2e65bab7e81b3f0bceabd67","Linux >= a62a8ef9d97da23762a588592c8b8eb50a8deb6a < 9d6dcf18a1b49990295ac8a05fd9bdfd27ccbf88","Linux >= a62a8ef9d97da23762a588592c8b8eb50a8deb6a < 5ee09cdaf3414f6c92960714af46d3d90eede2f3","Linux >= a62a8ef9d97da23762a588592c8b8eb50a8deb6a < 599d1e2a6aecc44acf22fe7ea6f5e84a7e526abe","Linux >= a62a8ef9d97da23762a588592c8b8eb50a8deb6a < f6ec52710dc5e156b774cbef5d0f5c99b1c53a80","Linux >= a62a8ef9d97da23762a588592c8b8eb50a8deb6a < c3e31d613951c299487844c4d1686a933e8ee291","Linux >= a62a8ef9d97da23762a588592c8b8eb50a8deb6a < a648d80f8d9b208beee03a2d9aa690cfacf1d41e","Linux >= a62a8ef9d97da23762a588592c8b8eb50a8deb6a < a94fd938df2b1628da66b498aa0eeb89593bc7a2","Linux 5.4"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T20:40:37.994772Z"},"published":"2025-05-01","updated":"2026-11-05","sourceUpdated":"2026-11-05T20:41:53.732Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-37773","references":[{"url":"https://git.kernel.org/stable/c/b84f13fdad10a543e2e65bab7e81b3f0bceabd67"},{"url":"https://git.kernel.org/stable/c/9d6dcf18a1b49990295ac8a05fd9bdfd27ccbf88"},{"url":"https://git.kernel.org/stable/c/5ee09cdaf3414f6c92960714af46d3d90eede2f3"},{"url":"https://git.kernel.org/stable/c/599d1e2a6aecc44acf22fe7ea6f5e84a7e526abe"},{"url":"https://git.kernel.org/stable/c/f6ec52710dc5e156b774cbef5d0f5c99b1c53a80"},{"url":"https://git.kernel.org/stable/c/c3e31d613951c299487844c4d1686a933e8ee291"},{"url":"https://git.kernel.org/stable/c/a648d80f8d9b208beee03a2d9aa690cfacf1d41e"},{"url":"https://git.kernel.org/stable/c/a94fd938df2b1628da66b498aa0eeb89593bc7a2"}],"tags":["cve.org"],"epss":0.00199,"epssPercentile":0.0981,"ingestedAt":"2026-11-05T22:38:31.870Z","slug":"CVE-2025-37773","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nvirtiofs: add filesystem context source name check\n\nIn certain scenarios, for example, during fuzz testing, the source\nname may be NULL, which could lead to a kernel panic. Therefore, an\nextra check for the source name should be added.\n\n## Affected\n\n- `Linux >= a62a8ef9d97da23762a588592c8b8eb50a8deb6a < b84f13fdad10a543e2e65bab7e81b3f0bceabd67`\n- `Linux >= a62a8ef9d97da23762a588592c8b8eb50a8deb6a < 9d6dcf18a1b49990295ac8a05fd9bdfd27ccbf88`\n- `Linux >= a62a8ef9d97da23762a588592c8b8eb50a8deb6a < 5ee09cdaf3414f6c92960714af46d3d90eede2f3`\n- `Linux >= a62a8ef9d97da23762a588592c8b8eb50a8deb6a < 599d1e2a6aecc44acf22fe7ea6f5e84a7e526abe`\n- `Linux >= a62a8ef9d97da23762a588592c8b8eb50a8deb6a < f6ec52710dc5e156b774cbef5d0f5c99b1c53a80`\n- `Linux >= a62a8ef9d97da23762a588592c8b8eb50a8deb6a < c3e31d613951c299487844c4d1686a933e8ee291`\n- `Linux >= a62a8ef9d97da23762a588592c8b8eb50a8deb6a < a648d80f8d9b208beee03a2d9aa690cfacf1d41e`\n- `Linux >= a62a8ef9d97da23762a588592c8b8eb50a8deb6a < a94fd938df2b1628da66b498aa0eeb89593bc7a2`\n- `Linux 5.4`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}