{"id":"CVE-2025-37857","title":"scsi: st: Fix array overflow in st_setup()","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: st: Fix array overflow in st_setup()\n\nChange the array size to follow parms size instead of a fixed value.","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 2bec708a88ce053ffcb0dd8e373d1e46c6dc38a4 < 736ae988bfb5932c05625baff70fba224d547c08","Linux >= 2bec708a88ce053ffcb0dd8e373d1e46c6dc38a4 < 574b399a7fb6ae71c97e26d122205c4a720c0e43","Linux >= 2bec708a88ce053ffcb0dd8e373d1e46c6dc38a4 < c6015d0f7a2236ddb3928b2dfcb1c556a1368b55","Linux >= 2bec708a88ce053ffcb0dd8e373d1e46c6dc38a4 < f746fe0c51e044d1248dc67918328bfb3d86b639","Linux >= 2bec708a88ce053ffcb0dd8e373d1e46c6dc38a4 < e4d1ca0a84a6650d3172eb8c07ef2fbc585b0d96","Linux >= 2bec708a88ce053ffcb0dd8e373d1e46c6dc38a4 < 7fe3b4deed8b93609058c37c9a11df1d2b2c0423","Linux >= 2bec708a88ce053ffcb0dd8e373d1e46c6dc38a4 < e6b585d016c47ca8a37b92ea8a3fe35c0b585256","Linux >= 2bec708a88ce053ffcb0dd8e373d1e46c6dc38a4 < ad4c3037dc77739a625246a2a0fb23b8f3402c06","Linux >= 2bec708a88ce053ffcb0dd8e373d1e46c6dc38a4 < a018d1cf990d0c339fe0e29b762ea5dc10567d67","Linux 3.19"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T20:42:28.336423Z"},"published":"2025-05-09","updated":"2026-11-05","sourceUpdated":"2026-11-05T20:52:05.617Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-37857","references":[{"url":"https://git.kernel.org/stable/c/736ae988bfb5932c05625baff70fba224d547c08"},{"url":"https://git.kernel.org/stable/c/574b399a7fb6ae71c97e26d122205c4a720c0e43"},{"url":"https://git.kernel.org/stable/c/c6015d0f7a2236ddb3928b2dfcb1c556a1368b55"},{"url":"https://git.kernel.org/stable/c/f746fe0c51e044d1248dc67918328bfb3d86b639"},{"url":"https://git.kernel.org/stable/c/e4d1ca0a84a6650d3172eb8c07ef2fbc585b0d96"},{"url":"https://git.kernel.org/stable/c/7fe3b4deed8b93609058c37c9a11df1d2b2c0423"},{"url":"https://git.kernel.org/stable/c/e6b585d016c47ca8a37b92ea8a3fe35c0b585256"},{"url":"https://git.kernel.org/stable/c/ad4c3037dc77739a625246a2a0fb23b8f3402c06"},{"url":"https://git.kernel.org/stable/c/a018d1cf990d0c339fe0e29b762ea5dc10567d67"}],"tags":["cve.org"],"epss":0.00314,"epssPercentile":0.24481,"ingestedAt":"2026-11-05T22:38:31.886Z","slug":"CVE-2025-37857","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nscsi: st: Fix array overflow in st_setup()\n\nChange the array size to follow parms size instead of a fixed value.\n\n## Affected\n\n- `Linux >= 2bec708a88ce053ffcb0dd8e373d1e46c6dc38a4 < 736ae988bfb5932c05625baff70fba224d547c08`\n- `Linux >= 2bec708a88ce053ffcb0dd8e373d1e46c6dc38a4 < 574b399a7fb6ae71c97e26d122205c4a720c0e43`\n- `Linux >= 2bec708a88ce053ffcb0dd8e373d1e46c6dc38a4 < c6015d0f7a2236ddb3928b2dfcb1c556a1368b55`\n- `Linux >= 2bec708a88ce053ffcb0dd8e373d1e46c6dc38a4 < f746fe0c51e044d1248dc67918328bfb3d86b639`\n- `Linux >= 2bec708a88ce053ffcb0dd8e373d1e46c6dc38a4 < e4d1ca0a84a6650d3172eb8c07ef2fbc585b0d96`\n- `Linux >= 2bec708a88ce053ffcb0dd8e373d1e46c6dc38a4 < 7fe3b4deed8b93609058c37c9a11df1d2b2c0423`\n- `Linux >= 2bec708a88ce053ffcb0dd8e373d1e46c6dc38a4 < e6b585d016c47ca8a37b92ea8a3fe35c0b585256`\n- `Linux >= 2bec708a88ce053ffcb0dd8e373d1e46c6dc38a4 < ad4c3037dc77739a625246a2a0fb23b8f3402c06`\n- `Linux >= 2bec708a88ce053ffcb0dd8e373d1e46c6dc38a4 < a018d1cf990d0c339fe0e29b762ea5dc10567d67`\n- `Linux 3.19`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}