The vulnerability of the dwc3_check_event_buf function in the Linux operating system, which allows a hacker to compromise the confidentiality of the protected information

🗓️ 01 Sep 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec🔗 bdu.fstec.ru👁 11 Views

The dwc3_check_event_buf flaw in Linux lets an attacker read beyond a buffer, exposing data.

Reporter	Title	Published	Views	Family All 244
Tenable Nessus	AlmaLinux 10 : kernel (ALSA-2025:16354)	9 Oct 202500:00	–	nessus
Tenable Nessus	AlmaLinux 9 : kernel (ALSA-2025:16398)	29 Sep 202500:00	–	nessus
Tenable Nessus	Azure Linux 3.0 Security Update: kernel (CVE-2025-37810)	22 Jan 202600:00	–	nessus
Tenable Nessus	Rocky Linux 10.0 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2025_16354)	1 Oct 202600:00	–	nessus
Tenable Nessus	Rocky Linux 9.2 [CIQ] Security Update: bpftool / kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (ciqsa-2026_0390)	1 Oct 202600:00	–	nessus
Tenable Nessus	Rocky Linux 9.2 [CIQ] Security Update: bpftool / kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ciqsa-2026_0618)	1 Oct 202600:00	–	nessus
Tenable Nessus	Rocky Linux 9.2 [CIQ] Security Update: bpftool-debuginfo Multiple Vulnerabilities (ciqsa-2026_1227)	1 Oct 202600:00	–	nessus
Tenable Nessus	Rocky Linux 9.2 [CIQ] Security Update: bpftool-debuginfo Multiple Vulnerabilities (ciqsa-2026_1245)	1 Oct 202600:00	–	nessus
Tenable Nessus	Rocky Linux 9.4 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-64k / kernel-64k-core / etc Multiple Vulnerabilities (ciqsa-2026_0516)	1 Oct 202600:00	–	nessus
Tenable Nessus	Rocky Linux 9.4 [CIQ] Security Update: kernel-rt-debug-debuginfo / kernel-rt-debuginfo Multiple Vulnerabilities (ciqsa-2026_1283)	1 Oct 202600:00	–	nessus

Vulners

Node

OR

novell suse_linux_enterprise_microMatch6.0

novell suse_linux_enterprise_microMatch6.1

red_hat,red_hat_enterprise_linuxMatch9

novell opensuse_leapMatch15.6

red_hat,red_hat_enterprise_linuxMatch10

Source	Link
lore	www.lore.kernel.org/linux-cve-announce/2025050816-CVE-2025-37810-57c4@gregkh/
git	www.git.kernel.org/stable/c/015c39f38e69a491d2abd5e98869a500a9459b3b
git	www.git.kernel.org/stable/c/52a7c9d930b95aa8b1620edaba4818040c32631f
git	www.git.kernel.org/stable/c/63ccd26cd1f6600421795f6ca3e625076be06c9f
git	www.git.kernel.org/stable/c/99d655119b870ee60e4dbf310aa9a1ed8d9ede3d
git	www.git.kernel.org/stable/c/a44547015287a19001384fe94dbff84c92ce4ee1
git	www.git.kernel.org/stable/c/b43225948b231b3f331194010f84512bee4d9f59
git	www.git.kernel.org/stable/c/c0079630f268843a25ed75226169cba40e0d8880
git	www.git.kernel.org/stable/c/c4d80e41cb42008dceb35e5dbf52574d93beac0d
security-tracker	www.security-tracker.debian.org/tracker/CVE-2025-37810

06 Jul 2026 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 21.4

CVSS 32.6

EPSS0.00232

dwc3_check_event_buf Linux memory overread confidentiality protected information