---
id: CVE-2025-37857
title: 'scsi: st: Fix array overflow in st_setup()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  scsi: st: Fix array overflow in st_setup()

  Change the array size to follow parms size instead of a fixed value.
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 2bec708a88ce053ffcb0dd8e373d1e46c6dc38a4 <
    736ae988bfb5932c05625baff70fba224d547c08
  - >-
    Linux >= 2bec708a88ce053ffcb0dd8e373d1e46c6dc38a4 <
    574b399a7fb6ae71c97e26d122205c4a720c0e43
  - >-
    Linux >= 2bec708a88ce053ffcb0dd8e373d1e46c6dc38a4 <
    c6015d0f7a2236ddb3928b2dfcb1c556a1368b55
  - >-
    Linux >= 2bec708a88ce053ffcb0dd8e373d1e46c6dc38a4 <
    f746fe0c51e044d1248dc67918328bfb3d86b639
  - >-
    Linux >= 2bec708a88ce053ffcb0dd8e373d1e46c6dc38a4 <
    e4d1ca0a84a6650d3172eb8c07ef2fbc585b0d96
  - >-
    Linux >= 2bec708a88ce053ffcb0dd8e373d1e46c6dc38a4 <
    7fe3b4deed8b93609058c37c9a11df1d2b2c0423
  - >-
    Linux >= 2bec708a88ce053ffcb0dd8e373d1e46c6dc38a4 <
    e6b585d016c47ca8a37b92ea8a3fe35c0b585256
  - >-
    Linux >= 2bec708a88ce053ffcb0dd8e373d1e46c6dc38a4 <
    ad4c3037dc77739a625246a2a0fb23b8f3402c06
  - >-
    Linux >= 2bec708a88ce053ffcb0dd8e373d1e46c6dc38a4 <
    a018d1cf990d0c339fe0e29b762ea5dc10567d67
  - Linux 3.19
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T20:42:28.336423Z'
published: '2025-05-09'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T20:52:05.617Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-37857'
references:
  - url: 'https://git.kernel.org/stable/c/736ae988bfb5932c05625baff70fba224d547c08'
  - url: 'https://git.kernel.org/stable/c/574b399a7fb6ae71c97e26d122205c4a720c0e43'
  - url: 'https://git.kernel.org/stable/c/c6015d0f7a2236ddb3928b2dfcb1c556a1368b55'
  - url: 'https://git.kernel.org/stable/c/f746fe0c51e044d1248dc67918328bfb3d86b639'
  - url: 'https://git.kernel.org/stable/c/e4d1ca0a84a6650d3172eb8c07ef2fbc585b0d96'
  - url: 'https://git.kernel.org/stable/c/7fe3b4deed8b93609058c37c9a11df1d2b2c0423'
  - url: 'https://git.kernel.org/stable/c/e6b585d016c47ca8a37b92ea8a3fe35c0b585256'
  - url: 'https://git.kernel.org/stable/c/ad4c3037dc77739a625246a2a0fb23b8f3402c06'
  - url: 'https://git.kernel.org/stable/c/a018d1cf990d0c339fe0e29b762ea5dc10567d67'
tags:
  - cve.org
epss: 0.00314
epssPercentile: 0.24481
ingestedAt: '2026-11-05T22:38:31.886Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

scsi: st: Fix array overflow in st_setup()

Change the array size to follow parms size instead of a fixed value.

## Affected

- `Linux >= 2bec708a88ce053ffcb0dd8e373d1e46c6dc38a4 < 736ae988bfb5932c05625baff70fba224d547c08`
- `Linux >= 2bec708a88ce053ffcb0dd8e373d1e46c6dc38a4 < 574b399a7fb6ae71c97e26d122205c4a720c0e43`
- `Linux >= 2bec708a88ce053ffcb0dd8e373d1e46c6dc38a4 < c6015d0f7a2236ddb3928b2dfcb1c556a1368b55`
- `Linux >= 2bec708a88ce053ffcb0dd8e373d1e46c6dc38a4 < f746fe0c51e044d1248dc67918328bfb3d86b639`
- `Linux >= 2bec708a88ce053ffcb0dd8e373d1e46c6dc38a4 < e4d1ca0a84a6650d3172eb8c07ef2fbc585b0d96`
- `Linux >= 2bec708a88ce053ffcb0dd8e373d1e46c6dc38a4 < 7fe3b4deed8b93609058c37c9a11df1d2b2c0423`
- `Linux >= 2bec708a88ce053ffcb0dd8e373d1e46c6dc38a4 < e6b585d016c47ca8a37b92ea8a3fe35c0b585256`
- `Linux >= 2bec708a88ce053ffcb0dd8e373d1e46c6dc38a4 < ad4c3037dc77739a625246a2a0fb23b8f3402c06`
- `Linux >= 2bec708a88ce053ffcb0dd8e373d1e46c6dc38a4 < a018d1cf990d0c339fe0e29b762ea5dc10567d67`
- `Linux 3.19`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.