ThreatCluster

Updates on CVE-2025-39694 and CVE-2025-37883 for s390/sclp

First seen 18 Feb 2026, 09:15 UTC Api.Msrc.Microsoft 41

Article Content

Browse articles
ThreatCluster

Microsoft has published information on two vulnerabilities affecting the s390/sclp subsystem. CVE-2025-39694, published on September 5, 2025, addresses an issue with the SCCB present check, while CVE-2025-37883, published on May 9, 2025, introduces a check for get_zeroed_page(). Both vulnerabilities require attention from affected users to ensure system security.

Timeline

2025-05-09
CVE-2025-37883 published
2025-09-05
CVE-2025-39694 published
2026-02-18
Information published on CVE-2025-39694
2026-02-18
Information published on CVE-2025-37883