CVE-2025-37977

Source
https://cve.org/CVERecord?id=CVE-2025-37977
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-37977.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-37977
Downstream
BELL (1)
DEBIAN (1)
ECHO (1)
MINI (1)
ROOT (2)
UBUNTU (1)
Published
2025-05-20T16:58:20Z
Modified
2026-10-24T02:30:58Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
scsi: ufs: exynos: Disable iocc if dma-coherent property isn't set
Details

In the Linux kernel, the following vulnerability has been resolved:

scsi: ufs: exynos: Disable iocc if dma-coherent property isn't set

If dma-coherent property isn't set then descriptors are non-cacheable and the iocc shareability bits should be disabled. Without this UFS can end up in an incompatible configuration and suffer from random cache related stability issues.

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/37xxx/CVE-2025-37977.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
cc52e15397cc5dc773d3c6792b98352d3209f93f
Fixed
b101fc9ac18d1ac434b703839a5117342a591792
Fixed
869749e48115ef944eeabec8e84138908471fa51
Fixed
f0c6728a6f2e269ebb234a9b5bb6c2c24aafeb51
Fixed
f92bb7436802f8eb7ee72dc911a33c8897fde366

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-37977.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.6.160
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.26
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.14.4

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-37977.json"