cve 2025 37857

The Linux kernel fix tracked as CVE‑2025‑37857 — described upstream as “scsi: st: Fix array overflow in st_setup()” — is a real, targeted patch that removes an array overflow by sizing a local buffer from the incoming parms length rather than a hardcoded value. Microsoft’s public advisory for...