---
id: CVE-2025-37773
title: 'virtiofs: add filesystem context source name check'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  virtiofs: add filesystem context source name check

  In certain scenarios, for example, during fuzz testing, the source
  name may be NULL, which could lead to a kernel pa…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= a62a8ef9d97da23762a588592c8b8eb50a8deb6a <
    b84f13fdad10a543e2e65bab7e81b3f0bceabd67
  - >-
    Linux >= a62a8ef9d97da23762a588592c8b8eb50a8deb6a <
    9d6dcf18a1b49990295ac8a05fd9bdfd27ccbf88
  - >-
    Linux >= a62a8ef9d97da23762a588592c8b8eb50a8deb6a <
    5ee09cdaf3414f6c92960714af46d3d90eede2f3
  - >-
    Linux >= a62a8ef9d97da23762a588592c8b8eb50a8deb6a <
    599d1e2a6aecc44acf22fe7ea6f5e84a7e526abe
  - >-
    Linux >= a62a8ef9d97da23762a588592c8b8eb50a8deb6a <
    f6ec52710dc5e156b774cbef5d0f5c99b1c53a80
  - >-
    Linux >= a62a8ef9d97da23762a588592c8b8eb50a8deb6a <
    c3e31d613951c299487844c4d1686a933e8ee291
  - >-
    Linux >= a62a8ef9d97da23762a588592c8b8eb50a8deb6a <
    a648d80f8d9b208beee03a2d9aa690cfacf1d41e
  - >-
    Linux >= a62a8ef9d97da23762a588592c8b8eb50a8deb6a <
    a94fd938df2b1628da66b498aa0eeb89593bc7a2
  - Linux 5.4
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T20:40:37.994772Z'
published: '2025-05-01'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T20:41:53.732Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-37773'
references:
  - url: 'https://git.kernel.org/stable/c/b84f13fdad10a543e2e65bab7e81b3f0bceabd67'
  - url: 'https://git.kernel.org/stable/c/9d6dcf18a1b49990295ac8a05fd9bdfd27ccbf88'
  - url: 'https://git.kernel.org/stable/c/5ee09cdaf3414f6c92960714af46d3d90eede2f3'
  - url: 'https://git.kernel.org/stable/c/599d1e2a6aecc44acf22fe7ea6f5e84a7e526abe'
  - url: 'https://git.kernel.org/stable/c/f6ec52710dc5e156b774cbef5d0f5c99b1c53a80'
  - url: 'https://git.kernel.org/stable/c/c3e31d613951c299487844c4d1686a933e8ee291'
  - url: 'https://git.kernel.org/stable/c/a648d80f8d9b208beee03a2d9aa690cfacf1d41e'
  - url: 'https://git.kernel.org/stable/c/a94fd938df2b1628da66b498aa0eeb89593bc7a2'
tags:
  - cve.org
epss: 0.00199
epssPercentile: 0.0981
ingestedAt: '2026-11-05T22:38:31.870Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

virtiofs: add filesystem context source name check

In certain scenarios, for example, during fuzz testing, the source
name may be NULL, which could lead to a kernel panic. Therefore, an
extra check for the source name should be added.

## Affected

- `Linux >= a62a8ef9d97da23762a588592c8b8eb50a8deb6a < b84f13fdad10a543e2e65bab7e81b3f0bceabd67`
- `Linux >= a62a8ef9d97da23762a588592c8b8eb50a8deb6a < 9d6dcf18a1b49990295ac8a05fd9bdfd27ccbf88`
- `Linux >= a62a8ef9d97da23762a588592c8b8eb50a8deb6a < 5ee09cdaf3414f6c92960714af46d3d90eede2f3`
- `Linux >= a62a8ef9d97da23762a588592c8b8eb50a8deb6a < 599d1e2a6aecc44acf22fe7ea6f5e84a7e526abe`
- `Linux >= a62a8ef9d97da23762a588592c8b8eb50a8deb6a < f6ec52710dc5e156b774cbef5d0f5c99b1c53a80`
- `Linux >= a62a8ef9d97da23762a588592c8b8eb50a8deb6a < c3e31d613951c299487844c4d1686a933e8ee291`
- `Linux >= a62a8ef9d97da23762a588592c8b8eb50a8deb6a < a648d80f8d9b208beee03a2d9aa690cfacf1d41e`
- `Linux >= a62a8ef9d97da23762a588592c8b8eb50a8deb6a < a94fd938df2b1628da66b498aa0eeb89593bc7a2`
- `Linux 5.4`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.