CVE-2022-49390, CVE-2022-50070, CVE-2022-50327 +184 more CVEs: linux kernel 5.14, 5.1, 2.6.12 (+12 more affected versions); +26 more affected products

CVE-2022-49390

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2022-50070

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2022-50327

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2023-52935

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2023-53074

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47691

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50061

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50067

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-53068

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-53090

Affected technology

linux kernel · before 6.11.9 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

linux kernel · 6.12 · update rc3
linux

linux kernel · 6.12 · update rc4
linux

Linux · 20acbd9a7aeee0b0af7107f3de791a52c949f3ac to before 9ada9ff6339d49df2260bb876ccf895d88928f81, 20acbd9a7aeee0b0af7107f3de791a52c949f3ac to before d7cbf81df996b1eae2dee8deb6df08e2eba78661, 20acbd9a7aeee0b0af7107f3de791a52c949f3ac to before 610a79ffea02102899a1373fe226d949944a7ed6
Linux

Linux · 4.15
Linux

Component: Not specified by the source
File: fs/afs/internal.h, fs/afs/rxrpc.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-53218

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-21855

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-37925

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-37968

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38095

Affected technology

linux kernel · from 5.0 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.192 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.140 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.92 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.30 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.14.8 (exclusive)
linux

linux kernel · 6.15 · update rc1
linux

linux kernel · 6.15 · update rc2
linux

linux kernel · 6.15 · update rc3
linux

linux kernel · 6.15 · update rc4
linux

linux kernel · 6.15 · update rc5
linux

linux kernel · 6.15 · update rc6
linux

debian linux · 11.0
debian

Linux · a590d0fdbaa56f482ff515e1040b6d9b1b200d63 to before 90eb79c4ed98a4e24a62ccf61c199ab0f680fa8f, a590d0fdbaa56f482ff515e1040b6d9b1b200d63 to before d0b7f11dd68b593bd970e5735be00e8d89bace30, a590d0fdbaa56f482ff515e1040b6d9b1b200d63 to before 3becc659f9cb76b481ad1fb71f54d5c8d6332d3f, a590d0fdbaa56f482ff515e1040b6d9b1b200d63 to before c9d2b9a80d06a58f37e0dc8c827075639b443927, a590d0fdbaa56f482ff515e1040b6d9b1b200d63 to before fe1bebd0edb22e3536cbc920ec713331d1367ad4, a590d0fdbaa56f482ff515e1040b6d9b1b200d63 to before 08680c4dadc6e736c75bc2409d833f03f9003c51, a590d0fdbaa56f482ff515e1040b6d9b1b200d63 to before 72c7d62583ebce7baeb61acce6057c361f73be4a
Linux

Linux · 5.0
Linux

Component: Not specified by the source
File: drivers/dma-buf/dma-resv.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38148

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38165

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38335

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38347

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38468

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38470

Affected technology

linux kernel · from 2.6.36 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.147 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.100 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.40 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.8 (exclusive)
linux

linux kernel · 6.16 · update rc1
linux

linux kernel · 6.16 · update rc2
linux

linux kernel · 6.16 · update rc3
linux

linux kernel · 6.16 · update rc4
linux

linux kernel · 6.16 · update rc5
linux

linux kernel · 6.16 · update rc6
linux

debian linux · 11.0
debian

Linux · ad1afb00393915a51c21b1ae8704562bf036855f to before ba48d3993af23753e1f1f01c8d592de9c7785f24, ad1afb00393915a51c21b1ae8704562bf036855f to before 35142b3816832889e50164d993018ea5810955ae, ad1afb00393915a51c21b1ae8704562bf036855f to before 047b61a24d7c866c502aeeea482892969a68f216, ad1afb00393915a51c21b1ae8704562bf036855f to before d43ef15bf4856c8c4c6c3572922331a5f06deb77, ad1afb00393915a51c21b1ae8704562bf036855f to before bb515c41306454937464da055609b5fb0a27821b, ad1afb00393915a51c21b1ae8704562bf036855f to before 8984bcbd1edf5bee5be06ad771d157333b790c33, ad1afb00393915a51c21b1ae8704562bf036855f to before 93715aa2d80e6c5cea1bb486321fc4585076928b, ad1afb00393915a51c21b1ae8704562bf036855f to before 579d4f9ca9a9a605184a9b162355f6ba131f678d
Linux

Linux · 2.6.36
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

Component: Not specified by the source
File: net/8021q/vlan.c, net/8021q/vlan.h

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38473

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38474

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38476

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38478

Affected technology

linux kernel · from 2.6.29 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.147 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.100 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.40 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.8 (exclusive)
linux

linux kernel · 6.16 · update rc1
linux

linux kernel · 6.16 · update rc2
linux

linux kernel · 6.16 · update rc3
linux

linux kernel · 6.16 · update rc4
linux

linux kernel · 6.16 · update rc5
linux

linux kernel · 6.16 · update rc6
linux

debian linux · 11.0
debian

Linux · ed9eccbe8970f6eedc1b978c157caf1251a896d4 to before 6f38c6380c3b38a05032b8881e41137385a6ce02, ed9eccbe8970f6eedc1b978c157caf1251a896d4 to before 13e4d9038a1e869445a996a3f604a84ef52fe8f4, ed9eccbe8970f6eedc1b978c157caf1251a896d4 to before 020eed5681d0f9bced73970368078a92d6cfaa9c, ed9eccbe8970f6eedc1b978c157caf1251a896d4 to before d3436638738ace8f101af7bdee2eae1bc38e9b29, ed9eccbe8970f6eedc1b978c157caf1251a896d4 to before 673ee92bd2d31055bca98a1d96b653f5284289c4, ed9eccbe8970f6eedc1b978c157caf1251a896d4 to before c42116dc70af6664526f7aa82cf937824ab42649, ed9eccbe8970f6eedc1b978c157caf1251a896d4 to before fe8713fb4e4e82a4f91910d9a41bf0613e69a0b9, ed9eccbe8970f6eedc1b978c157caf1251a896d4 to before 46d8c744136ce2454aa4c35c138cc06817f92b8e
Linux

Linux · 2.6.29
Linux

Component: Not specified by the source
File: drivers/comedi/comedi_fops.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38480

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38481

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38482

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38483

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38487

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38488

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38494

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38495

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38497

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38499

Affected technology

linux kernel · from 4.4.281 (inclusive), before 4.5 (exclusive)
linux

linux kernel · from 4.9.280 (inclusive), before 4.10 (exclusive)
linux

linux kernel · from 4.14.244 (inclusive), before 4.15 (exclusive)
linux

linux kernel · from 4.19.204 (inclusive), before 4.20 (exclusive)
linux

linux kernel · from 5.4.141 (inclusive), before 5.5 (exclusive)
linux

linux kernel · from 5.10.59 (inclusive), before 5.11 (exclusive)
linux

linux kernel · from 5.13.11 (inclusive), before 5.14 (exclusive)
linux

linux kernel · from 5.14.1 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.147 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.100 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.40 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.3 (exclusive)
linux

linux kernel · 5.14
linux

linux kernel · 5.14 · update rc6
linux

linux kernel · 5.14 · update rc7
linux

debian linux · 11.0
debian

Linux · 427215d85e8d1476da1a86b8d67aceb485eb3631 to before 36fecd740de2d542d2091d65d36554ee2bcf9c65, 427215d85e8d1476da1a86b8d67aceb485eb3631 to before d717325b5ecf2a40daca85c61923e17f32306179, 427215d85e8d1476da1a86b8d67aceb485eb3631 to before dc6a664089f10eab0fb36b6e4f705022210191d2, 427215d85e8d1476da1a86b8d67aceb485eb3631 to before e77078e52fbf018ab986efb3c79065ab35025607, 427215d85e8d1476da1a86b8d67aceb485eb3631 to before 38628ae06e2a37770cd794802a3f1310cf9846e3, 427215d85e8d1476da1a86b8d67aceb485eb3631 to before c28f922c9dcee0e4876a2c095939d77fe7e15116, c6e8810d25295acb40a7b69ed3962ff181919571, e3eee87c846dc47f6d8eb6d85e7271f24122a279, 517b875dfbf58f0c6c9e32dc90f5cf42d71a42ce, 963d85d630dabe75a3cfde44a006fec3304d07b8, 812f39ed5b0b7f34868736de3055c92c7c4cf459, 6a002d48a66076524f67098132538bef17e8445e, 41812f4b84484530057513478c6770590347dc30, 4.4.281 to before 4.5, 4.9.280 to before 4.10, 4.14.244 to before 4.15, 4.19.204 to before 4.20, 5.4.141 to before 5.5, 5.10.59 to before 5.11, 5.13.11 to before 5.14
Linux

Linux · 5.14
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

Component: Not specified by the source
File: fs/namespace.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38502

Affected technology

linux kernel · from 5.9 (inclusive), before 5.15.192 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.151 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.105 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.46 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.1 (exclusive)
linux

debian linux · 11.0
debian

simatic cn 4100 firmware · before 5.0 (exclusive)
siemens

Linux · 7d9c3427894fe70d1347b4820476bf37736d2ff0 to before c1c74584b9b4043c52e41fec415226e582d266a3, 7d9c3427894fe70d1347b4820476bf37736d2ff0 to before 66da7cee78590259b400e51a70622ccd41da7bb2, 7d9c3427894fe70d1347b4820476bf37736d2ff0 to before 7acfa07c585e3d7a64654d38f0a5c762877d0b9b, 7d9c3427894fe70d1347b4820476bf37736d2ff0 to before 41688d1fc5d163a6c2c0e95c0419e2cb31a44648, 7d9c3427894fe70d1347b4820476bf37736d2ff0 to before 19341d5c59e8c7e8528e40f8663e99d67810473c, 7d9c3427894fe70d1347b4820476bf37736d2ff0 to before abad3d0bad72a52137e0c350c59542d75ae4f513
Linux

Linux · 5.9
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: include/linux/bpf.h, kernel/bpf/core.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38527

Affected technology

linux kernel · from 3.16.72 (inclusive), before 3.17 (exclusive)
linux

linux kernel · from 4.9.171 (inclusive), before 4.10 (exclusive)
linux

linux kernel · from 4.14.114 (inclusive), before 4.15 (exclusive)
linux

linux kernel · from 4.19.37 (inclusive), before 4.20 (exclusive)
linux

linux kernel · from 5.0.10 (inclusive), before 5.1 (exclusive)
linux

linux kernel · from 5.1.1 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.147 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.100 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.40 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.8 (exclusive)
linux

linux kernel · 5.1
linux

linux kernel · 5.1 · update rc6
linux

linux kernel · 5.1 · update rc7
linux

linux kernel · 6.16 · update rc1
linux

linux kernel · 6.16 · update rc2
linux

linux kernel · 6.16 · update rc3
linux

linux kernel · 6.16 · update rc4
linux

linux kernel · 6.16 · update rc5
linux

linux kernel · 6.16 · update rc6
linux

debian linux · 11.0
debian

Linux · b98749cac4a695f084a5ff076f4510b23e353ecd to before 4256a483fe58af66a46cbf3dc48ff26e580d3308, b98749cac4a695f084a5ff076f4510b23e353ecd to before 0a4eec84d4d2c4085d4ed8630fd74e4b39033c1b, b98749cac4a695f084a5ff076f4510b23e353ecd to before 2baaf5bbab2ac474c4f92c10fcb3310f824db995, b98749cac4a695f084a5ff076f4510b23e353ecd to before 09bce2138a30ef10d8821c8c3f73a4ab7a5726bc, b98749cac4a695f084a5ff076f4510b23e353ecd to before da11bd4b697b393a207f19a2ed7d382a811a3ddc, b98749cac4a695f084a5ff076f4510b23e353ecd to before 705c79101ccf9edea5a00d761491a03ced314210, 2429fcf06d3cb962693868ab0a927c9038f12a2d, 1ee4f2d7cdcd4508cc3cbe3b2622d7177b89da12, 53fc31a4853e30d6e8f142b824f724da27ff3e40, 8092ecc306d81186a64cda42411121f4d35aaff4, ebac4d0adf68f8962bd82fcf483936edd6ec095b, 3.16.72 to before 3.17, 4.9.171 to before 4.10, 4.14.114 to before 4.15, 4.19.37 to before 4.20, 5.0.10 to before 5.1
Linux

Linux · 5.1
Linux

Component: Not specified by the source
File: fs/smb/client/file.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38528

Affected technology

linux kernel · from 5.13 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.147 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.100 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.40 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.8 (exclusive)
linux

linux kernel · 6.16 · update rc1
linux

linux kernel · 6.16 · update rc2
linux

linux kernel · 6.16 · update rc3
linux

linux kernel · 6.16 · update rc4
linux

linux kernel · 6.16 · update rc5
linux

linux kernel · 6.16 · update rc6
linux

debian linux · 11.0
debian

Linux · 48cac3f4a96ddf08df8e53809ed066de0dc93915 to before 97303e541e12f1fea97834ec64b98991e8775f39, 48cac3f4a96ddf08df8e53809ed066de0dc93915 to before 61d5fa45ed13e42af14c7e959baba9908b8ee6d4, 48cac3f4a96ddf08df8e53809ed066de0dc93915 to before e7be679124bae8cf4fa6e40d7e1661baddfb3289, 48cac3f4a96ddf08df8e53809ed066de0dc93915 to before 6952aeace93f8c9ea01849efecac24dd3152c9c9, 48cac3f4a96ddf08df8e53809ed066de0dc93915 to before 1c5f5fd47bbda17cb885fe6f03730702cd53d3f8, 48cac3f4a96ddf08df8e53809ed066de0dc93915 to before f8242745871f81a3ac37f9f51853d12854fd0b58
Linux

Linux · 5.13
Linux

Component: Not specified by the source
File: kernel/bpf/helpers.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38529

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38530

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38535

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38538

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38539

Affected technology

linux kernel · from 2.6.31 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.147 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.100 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.40 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.8 (exclusive)
linux

linux kernel · 6.16 · update rc1
linux

linux kernel · 6.16 · update rc2
linux

linux kernel · 6.16 · update rc3
linux

linux kernel · 6.16 · update rc4
linux

linux kernel · 6.16 · update rc5
linux

linux kernel · 6.16 · update rc6
linux

debian linux · 11.0
debian

Linux · 110bf2b764eb6026b868d84499263cb24b1bcc8d to before e70f5ee4c8824736332351b703c46f9469ed7f6c, 110bf2b764eb6026b868d84499263cb24b1bcc8d to before db45632479ceecb669612ed8dbce927e3c6279fc, 110bf2b764eb6026b868d84499263cb24b1bcc8d to before ca60064ea03f14e06c763de018403cb56ba3207d, 110bf2b764eb6026b868d84499263cb24b1bcc8d to before 7803b28c9aa8d8bd4e19ebcf5f0db9612b0f333b, 110bf2b764eb6026b868d84499263cb24b1bcc8d to before 6bc94f20a4c304997288f9a45278c9d0c06987d3, 110bf2b764eb6026b868d84499263cb24b1bcc8d to before 33e20747b47ddc03569b6bc27a2d6894c1428182, 110bf2b764eb6026b868d84499263cb24b1bcc8d to before 70fecd519caad0c1741c3379d5348c9000a5b29d, 110bf2b764eb6026b868d84499263cb24b1bcc8d to before b5e8acc14dcb314a9b61ff19dcd9fdd0d88f70df
Linux

Linux · 2.6.31
Linux

Component: Not specified by the source
File: kernel/trace/trace_events.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38548

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38550

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38553

Affected technology

Rejected reason: This CVE ID · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38555

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38563

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38565

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38569

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38572

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38574

Affected technology

linux kernel · from 2.6.13 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.148 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.102 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.42 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.10 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.1 (exclusive)
linux

linux kernel · 2.6.12
linux

linux kernel · 2.6.12 · update rc2
linux

linux kernel · 2.6.12 · update rc3
linux

linux kernel · 2.6.12 · update rc4
linux

linux kernel · 2.6.12 · update rc5
linux

debian linux · 11.0
debian

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 97b8c5d322c5c0038cac4bc56fdbe237d0be426f, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 26672f1679b143aa34fca0b6046b7fd0c184770d, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 5de7513f38f3c19c0610294ee478242bea356f8c, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 504cc4ab91073d2ac7404ad146139f86ecee7193, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 5005d24377378a20e5c0e53052fc4ebdcdcbc611, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ea99b88b1999ebcb24d5d3a6b7910030f40d3bba, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b7dcda76fd0615c0599c89f36873a6cd48e02dbb, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1a04db0fd75cb6034fc27a56b67b3b8b9022a98c, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before de9c4861fb42f0cd72da844c3c34f692d5895b7b
Linux

Linux · 2.6.12
Linux

Component: Not specified by the source
File: drivers/net/ppp/pptp.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.6/10) rates confidentiality and integrity impact as low; availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38576

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38577

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38578

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38579

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38581

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38583

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38601

Affected technology

linux kernel · from 5.7 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.148 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.102 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.42 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.10 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.1 (exclusive)
linux

debian linux · 11.0
debian

Linux · 5118935b1bc28d0bce9427e584e11e905e68ee9a to before 3a6daae987a829534636fd85ed6f84d5f0ad7fa4, 5118935b1bc28d0bce9427e584e11e905e68ee9a to before eff3bb53c18c0ed4ab6f43d412b3ed3aecad52d5, 5118935b1bc28d0bce9427e584e11e905e68ee9a to before 916ac18d526a26f6072866b1a97622cf1351ef1c, 5118935b1bc28d0bce9427e584e11e905e68ee9a to before 5bf201c55fdf303e79005038648dfa1e8af48f54, 5118935b1bc28d0bce9427e584e11e905e68ee9a to before 72a48be1f53942793f3bc68a37fad1f38b53b082, 5118935b1bc28d0bce9427e584e11e905e68ee9a to before 0ebb5fe494501c19f31270008b26ab95201af6fd, 5118935b1bc28d0bce9427e584e11e905e68ee9a to before 16872194c80f2724472fc207991712895ac8a230, 5118935b1bc28d0bce9427e584e11e905e68ee9a to before a5b46aa7cf5f05c213316a018e49a8e086efd98e
Linux

Linux · 5.7
Linux

Component: Not specified by the source
File: drivers/net/wireless/ath/ath11k/hal.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38602

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38604

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38608

Affected technology

linux kernel · from 5.0 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.148 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.102 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.42 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.10 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.1 (exclusive)
linux

debian linux · 11.0
debian

Linux · 7246d8ed4dcce23f7509949a77be15fa9f0e3d28 to before 6ba20ff3cdb96a908b9dc93cf247d0b087672e7c, 7246d8ed4dcce23f7509949a77be15fa9f0e3d28 to before 849d24dc5aed45ebeb3490df429356739256ac40, 7246d8ed4dcce23f7509949a77be15fa9f0e3d28 to before 73fc5d04009d3969ff8e8574f0fd769f04124e59, 7246d8ed4dcce23f7509949a77be15fa9f0e3d28 to before 16aca8bb4ad0d8a13c8b6da4007f4e52d53035bb, 7246d8ed4dcce23f7509949a77be15fa9f0e3d28 to before 0e853c1464bcf61207f8b5c32d2ac5ee495e859d, 7246d8ed4dcce23f7509949a77be15fa9f0e3d28 to before ee03766d79de0f61ea29ffb6ab1c7b196ea1b02e, 7246d8ed4dcce23f7509949a77be15fa9f0e3d28 to before 90d6ef67440cec2a0aad71a0108c8f216437345c, 7246d8ed4dcce23f7509949a77be15fa9f0e3d28 to before 1e480387d4b42776f8957fb148af9d75ce93b96d, 7246d8ed4dcce23f7509949a77be15fa9f0e3d28 to before 178f6a5c8cb3b6be1602de0964cd440243f493c9
Linux

Linux · 5.0
Linux

Component: Not specified by the source
File: net/tls/tls_sw.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.6/10) rates confidentiality impact as high; integrity and availability impact as low. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38609

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38612

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38614

Affected technology

linux kernel · from 2.6.32.30 (inclusive), before 2.6.33 (exclusive)
linux

linux kernel · from 2.6.33.8 (inclusive), before 2.6.34 (exclusive)
linux

linux kernel · from 2.6.34.10 (inclusive), before 2.6.35 (exclusive)
linux

linux kernel · from 2.6.35.12 (inclusive), before 2.6.36 (exclusive)
linux

linux kernel · from 2.6.37.3 (inclusive), before 2.6.38 (exclusive)
linux

linux kernel · from 2.6.38.1 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.1 (exclusive)
linux

linux kernel · 2.6.38
linux

linux kernel · 2.6.38 · update rc7
linux

linux kernel · 2.6.38 · update rc8
linux

debian linux · 11.0
debian

Linux · 22bacca48a1755f79b7e0f192ddb9fbb7fc6e64e to before 71379495ab70eaba19224bd71b5b9b399eb85e04, 22bacca48a1755f79b7e0f192ddb9fbb7fc6e64e to before 1b13b033062824495554e836a1ff5f85ccf6b039, 22bacca48a1755f79b7e0f192ddb9fbb7fc6e64e to before 2a0c0c974bea9619c6f41794775ae4b97530e0e6, 22bacca48a1755f79b7e0f192ddb9fbb7fc6e64e to before 7a2125962c42d5336ca0495a9ce4cb38a63e9161, 22bacca48a1755f79b7e0f192ddb9fbb7fc6e64e to before ea5f97dbdcb1651581a22bd10afd2f0dd9dc11d6, 22bacca48a1755f79b7e0f192ddb9fbb7fc6e64e to before 3542c90797bc3ab83ebab54b737d751cf3682036, 22bacca48a1755f79b7e0f192ddb9fbb7fc6e64e to before f2e467a48287c868818085aa35389a224d226732, 8216e1a0d47cae06a75c42346f19dffe14e42d57, 28a92748aa4bc57d35e7b079498b0ac2e7610a37, 7eebcd4792c5a341559aed327b6afecbb1c46402, 0eccd188cfeaf857a26f2d72941d27d298cf6a54, a72affdbb09f3f24f64ffcbbdf62c2e57c58f379, 2.6.32.30 to before 2.6.33, 2.6.33.8 to before 2.6.34, 2.6.34.10 to before 2.6.35, 2.6.35.12 to before 2.6.36, 2.6.37.3 to before 2.6.38
Linux

Linux · 2.6.38
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: fs/eventpoll.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38622

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38623

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38624

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38630

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38634

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38635

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38639

Affected technology

linux kernel · from 3.3 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.148 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.102 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.42 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.10 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.1 (exclusive)
linux

debian linux · 11.0
debian

Linux · ceb98d03eac5704820f2ac1f370c9ff385e3a9f5 to before 66d41268ede1e1b6e71ba28be923397ff0b2b9c3, ceb98d03eac5704820f2ac1f370c9ff385e3a9f5 to before e021a1eee196887536a6630c5492c23a4c78d452, ceb98d03eac5704820f2ac1f370c9ff385e3a9f5 to before b10cfa2de13d28ddd03210eb234422b7ec92725a, ceb98d03eac5704820f2ac1f370c9ff385e3a9f5 to before e18939176e657a3a20bfbed357b8c55a9f82aba3, ceb98d03eac5704820f2ac1f370c9ff385e3a9f5 to before 58004aa21e79addaf41667bfe65e93ec51653f18, ceb98d03eac5704820f2ac1f370c9ff385e3a9f5 to before 7c1ae471da69c09242834e956218ea6a42dd405a, ceb98d03eac5704820f2ac1f370c9ff385e3a9f5 to before 58007fc7b94fb2702000045ff401eb7f5bde7828, ceb98d03eac5704820f2ac1f370c9ff385e3a9f5 to before df13c9c6ce1d55c31d1bd49db65a7fbbd86aab13, ceb98d03eac5704820f2ac1f370c9ff385e3a9f5 to before bf58e667af7d96c8eb9411f926a0a0955f41ce21
Linux

Linux · 3.3
Linux

Component: Not specified by the source
File: net/netfilter/xt_nfacct.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38645

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38650

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38652

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38663

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38664

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38666

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38668

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38670

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38671

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38676

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38677

Affected technology

linux kernel · from 3.8 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.44 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.4 (exclusive)
linux

debian linux · 11.0
debian

Linux · 98e4da8ca301e062d79ae168c67e56f3c3de3ce4 to before ee4d13f5407cbdf1216cc258f45492075713889a, 98e4da8ca301e062d79ae168c67e56f3c3de3ce4 to before a650654365c57407413e9b1f6ff4d539bf2e99ca, 98e4da8ca301e062d79ae168c67e56f3c3de3ce4 to before 6b7784ea07e6aa044f74b39d6b5af5e28746fc81, 98e4da8ca301e062d79ae168c67e56f3c3de3ce4 to before 901f62efd6e855f93d8b1175540f29f4dc45ba55, 98e4da8ca301e062d79ae168c67e56f3c3de3ce4 to before 92ef491b506a0f4dd971a3a76f86f2d8f5370180, 98e4da8ca301e062d79ae168c67e56f3c3de3ce4 to before 888aa660144bcb6ec07839da756ee46bfcf7fc53, 98e4da8ca301e062d79ae168c67e56f3c3de3ce4 to before f1d5093d9fe9f3c74c123741c88666cc853b79c5, 98e4da8ca301e062d79ae168c67e56f3c3de3ce4 to before 77de19b6867f2740cdcb6c9c7e50d522b47847a4
Linux

Linux · 3.8
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: fs/f2fs/node.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38678

Affected technology

linux kernel · from 5.8 (inclusive), before 6.6.117 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.59 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.2 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

Linux · 78d9f48f7f44431a25da2b46b3a8812f6ff2b981 to before 0521e694d5b80899fba8695881a6349f9bc538cb, 78d9f48f7f44431a25da2b46b3a8812f6ff2b981 to before 4681960bc0f4f8bcc782cbf2fd205f48ad314dfd, 78d9f48f7f44431a25da2b46b3a8812f6ff2b981 to before 4ce2a0c3b8497a66cfc25fc7ca3d087258a785d2, 78d9f48f7f44431a25da2b46b3a8812f6ff2b981 to before 3f358a66a04513311668ea4b40f5064e253d8386, 78d9f48f7f44431a25da2b46b3a8812f6ff2b981 to before cf23d531a9d496863aa4c5a0e2f71f0a23f3df3c, 78d9f48f7f44431a25da2b46b3a8812f6ff2b981 to before d7615bde541f16517d6790412da6ec46fa8a4c1f, 78d9f48f7f44431a25da2b46b3a8812f6ff2b981 to before cf5fb87fcdaaaafec55dcc0dc5a9e15ead343973
Linux

Linux · 5.8
Linux

Component: Not specified by the source
File: net/netfilter/nf_tables_api.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38680

Affected technology

linux kernel · from 2.6.27 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

linux kernel · 2.6.26
linux

linux kernel · 2.6.26 · update rc9
linux

debian linux · 11.0
debian

Linux · c0efd232929c2cd87238de2cccdaf4e845be5b0c to before 9ad554217c9b945031c73df4e8176a475e2dea57, c0efd232929c2cd87238de2cccdaf4e845be5b0c to before 1e269581b3aa5962fdc52757ab40da286168c087, c0efd232929c2cd87238de2cccdaf4e845be5b0c to before 8343f3fe0b755925f83d60b05e92bf4396879758, c0efd232929c2cd87238de2cccdaf4e845be5b0c to before ffdd82182953df643aa63d999b6f1653d0c93778, c0efd232929c2cd87238de2cccdaf4e845be5b0c to before a97e062e4ff3dab84a2f1eb811e9eddc6699e2a9, c0efd232929c2cd87238de2cccdaf4e845be5b0c to before cac702a439050df65272c49184aef7975fe3eff2, c0efd232929c2cd87238de2cccdaf4e845be5b0c to before 424980d33b3f816485513e538610168b03fab9f1, c0efd232929c2cd87238de2cccdaf4e845be5b0c to before 6d4a7c0b296162354b6fc759a1475b9d57ddfaa6, c0efd232929c2cd87238de2cccdaf4e845be5b0c to before 782b6a718651eda3478b1824b37a8b3185d2740c
Linux

Linux · 2.6.26
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
Function: accesses
File: drivers/media/usb/uvc/uvc_driver.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38681

Affected technology

linux kernel · from 5.7 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

debian linux · 11.0
debian

Linux · bbd6ec605c0fc286c3f8ce60b4ed44635361d58b to before 3ee9a8c27bfd72c3f465004fa8455785d61be5e8, bbd6ec605c0fc286c3f8ce60b4ed44635361d58b to before 69bea84b06b5e779627e7afdbf4b60a7d231c76f, bbd6ec605c0fc286c3f8ce60b4ed44635361d58b to before ac25ec5fa2bf6e606dc7954488e4dded272fa9cd, bbd6ec605c0fc286c3f8ce60b4ed44635361d58b to before 1636b5e9c3543b87d673e32a47e7c18698882425, bbd6ec605c0fc286c3f8ce60b4ed44635361d58b to before ff40839e018b82c4d756d035f34a63aa2d93be83, bbd6ec605c0fc286c3f8ce60b4ed44635361d58b to before 67995d4244694928ce701928e530b5b4adeb17b4, bbd6ec605c0fc286c3f8ce60b4ed44635361d58b to before ca8c414499f2e5337a95a76be0d21b728ee31c6b, bbd6ec605c0fc286c3f8ce60b4ed44635361d58b to before 59305202c67fea50378dcad0cc199dbc13a0e99a
Linux

Linux · 5.7
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: arch/arm64/mm/ptdump_debugfs.c, arch/riscv/mm/ptdump.c, arch/s390/mm/dump_pagetables.c, mm/ptdump.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38684

Affected technology

linux kernel · from 5.4.296 (inclusive), before 5.5 (exclusive)
linux

linux kernel · from 5.6 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

debian linux · 11.0
debian

Linux · dcc68b4d8084e1ac9af0d4022d6b1aff6a139a33 to before bdfddcde86e8b9245d9c0c2efe2b6fe8dcf6bf41, dcc68b4d8084e1ac9af0d4022d6b1aff6a139a33 to before be9692dafdfb36d9c43afd9d4e1d9d9ba8e7b51b, dcc68b4d8084e1ac9af0d4022d6b1aff6a139a33 to before 97ec167cd2e8a81a2d87331a2ed92daf007542c8, dcc68b4d8084e1ac9af0d4022d6b1aff6a139a33 to before 84a24fb446ee07b22b64aae6f0e3f4a38266310a, dcc68b4d8084e1ac9af0d4022d6b1aff6a139a33 to before 5b3b346bc4c2aa2c428735438a11989d251f32f1, dcc68b4d8084e1ac9af0d4022d6b1aff6a139a33 to before d69f4a258cd91b3bcef7089eb0401005aae2aed5, dcc68b4d8084e1ac9af0d4022d6b1aff6a139a33 to before 970c1c731c4ede46d05f5b0355724d1e400cfbca, dcc68b4d8084e1ac9af0d4022d6b1aff6a139a33 to before 87c6efc5ce9c126ae4a781bc04504b83780e3650, 3b290923ad2b23596208c1e29520badef4356a43, 5.4.296 to before 5.5
Linux

Linux · 5.6
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: net/sched/sch_ets.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38685

Affected technology

linux kernel · from 2.6.13 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

linux kernel · 2.6.12
linux

linux kernel · 2.6.12 · update rc2
linux

linux kernel · 2.6.12 · update rc3
linux

linux kernel · 2.6.12 · update rc4
linux

linux kernel · 2.6.12 · update rc5
linux

debian linux · 11.0
debian

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 078e62bffca4b7e72e8f3550eb063ab981c36c7a, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 4c4d7ddaf1d43780b106bedc692679f965dc5a3a, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 27b118aebdd84161c8ff5ce49d9d536f2af10754, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ed9b8e5016230868c8d813d9179523f729fec8c6, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 56701bf9eeb63219e378cb7fcbd066ea4eaeeb50, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before cfec17721265e72e50cc69c6004fe3475cd38df2, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before af0db3c1f898144846d4c172531a199bb3ca375d
Linux

Linux · 2.6.12
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

Component: Not specified by the source
File: drivers/video/fbdev/core/fbcon.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38687

Affected technology

linux kernel · from 3.14 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

debian linux · 11.0
debian

Linux · 2f3fdcd7ce935f6f2899ceab57dc8fe5286db3e1 to before fe67122ba781df44a1a9716eb1dfd751321ab512, 2f3fdcd7ce935f6f2899ceab57dc8fe5286db3e1 to before cd4286123d6948ff638ea9cd5818ae4796d5d252, 2f3fdcd7ce935f6f2899ceab57dc8fe5286db3e1 to before d85fac8729c9acfd72368faff1d576ec585e5c8f, 2f3fdcd7ce935f6f2899ceab57dc8fe5286db3e1 to before 0f989f9d05492028afd2bded4b42023c57d8a76e, 2f3fdcd7ce935f6f2899ceab57dc8fe5286db3e1 to before 5c4a2ffcbd052c69bbf4680677d4c4eaa5a252d4, 2f3fdcd7ce935f6f2899ceab57dc8fe5286db3e1 to before 017198079551a2a5cf61eae966af3c4b145e1f3b, 2f3fdcd7ce935f6f2899ceab57dc8fe5286db3e1 to before 71ca60d2e631cf9c63bcbc7017961c61ff04e419, 2f3fdcd7ce935f6f2899ceab57dc8fe5286db3e1 to before 5724e82df4f9a4be62908362c97d522d25de75dd, 2f3fdcd7ce935f6f2899ceab57dc8fe5286db3e1 to before 35b6fc51c666fc96355be5cd633ed0fe4ccf68b2
Linux

Linux · 3.14
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
Function: to
File: drivers/comedi/comedi_fops.c, drivers/comedi/comedi_internal.h, drivers/comedi/drivers.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · User interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

A local attacker with low privileges can trigger a use-after-free error. Source advisory’s CVSS 3.1 assessment (base score 7.3/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not state a further attacker outcome.

CVE-2025-38691

Affected technology

linux kernel · from 3.18 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

debian linux · 11.0
debian

Linux · 34dc93c2fc04da0d01acf8a1660b4ab276208af7 to before 579b85f893d9885162e1cabf99a4a088916e143e, 34dc93c2fc04da0d01acf8a1660b4ab276208af7 to before 2896f101110076ac6bf99d7aaf463d61e26f89dd, 34dc93c2fc04da0d01acf8a1660b4ab276208af7 to before 4f783333cbfa2ee7d4aa8e47f6bd1b3f77534fcf, 34dc93c2fc04da0d01acf8a1660b4ab276208af7 to before 9be5c04beca3202d0a5f09fb4b2ecb644caa0bc5, 34dc93c2fc04da0d01acf8a1660b4ab276208af7 to before 24334f3cf8a294f253071b5bf22d754dbb6d0f2d, 34dc93c2fc04da0d01acf8a1660b4ab276208af7 to before f0b2eee3fbba9b7e3746ef698424ef5e4a197776, 34dc93c2fc04da0d01acf8a1660b4ab276208af7 to before 94ec6d939031a616474376dadbf4a8d0ef8b0bcc, 34dc93c2fc04da0d01acf8a1660b4ab276208af7 to before 37c3443a2685528f972d910a6fb87716b96fef46, 34dc93c2fc04da0d01acf8a1660b4ab276208af7 to before 9768797c219326699778fba9cd3b607b2f1e7950
Linux

Linux · 3.18
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

Component: Not specified by the source
Function: ext_tree_prepare_commit
File: fs/nfs/blocklayout/extent_tree.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38693

Affected technology

linux kernel · from 2.6.39 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

debian linux · 11.0
debian

Linux · 713d54a8bd812229410a1902cd9b332a2a27af9f to before 7a41ecfc3415ebe3b4c44f96b3337691dcf431a3, 713d54a8bd812229410a1902cd9b332a2a27af9f to before b3d77a3fc71c084575d3df4ec6544b3fb6ce587d, 713d54a8bd812229410a1902cd9b332a2a27af9f to before 17b30e5ded062bd74f8ca6f317e1d415a8680665, 713d54a8bd812229410a1902cd9b332a2a27af9f to before 454a443eaa792c8865c861a282fe6d4f596abc3a, 713d54a8bd812229410a1902cd9b332a2a27af9f to before 6bbaec6a036940e22318f0454b50b8000845ab59, 713d54a8bd812229410a1902cd9b332a2a27af9f to before f98132a59ccc59a8b97987363bc99c8968934756, 713d54a8bd812229410a1902cd9b332a2a27af9f to before 99690a494d91a0dc86cebd628da4c62c40552bcb, 713d54a8bd812229410a1902cd9b332a2a27af9f to before 39b06b93f24dff923c4183d564ed28c039150554, 713d54a8bd812229410a1902cd9b332a2a27af9f to before ed0234c8458b3149f15e496b48a1c9874dd24a1b
Linux

Linux · 2.6.39
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: drivers/media/dvb-frontends/dib7000p.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38694

Affected technology

linux kernel · from 2.6.39 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

debian linux · 11.0
debian

Linux · 713d54a8bd812229410a1902cd9b332a2a27af9f to before bc07cae4f36bb18d5b6a9ed835c1278ca44ec82e, 713d54a8bd812229410a1902cd9b332a2a27af9f to before ce8b7c711b9c4f040b5419729d0972db8e374324, 713d54a8bd812229410a1902cd9b332a2a27af9f to before 529fd5593b721e6f4370c591f5086649ed149ff6, 713d54a8bd812229410a1902cd9b332a2a27af9f to before c33280d6bd668dbdc5a5f07887cc63a52ab4789c, 713d54a8bd812229410a1902cd9b332a2a27af9f to before 09906650484a09b3a4d4b3d3065395856810becd, 713d54a8bd812229410a1902cd9b332a2a27af9f to before 0bb32863426afe0badac25c28d59021f211d0f48, 713d54a8bd812229410a1902cd9b332a2a27af9f to before a0f744d6cdde81d7382e183f77a4080a39b206cd, 713d54a8bd812229410a1902cd9b332a2a27af9f to before 19eb5d8e6aa1169d368a4d69aae5572950deb89d, 713d54a8bd812229410a1902cd9b332a2a27af9f to before ce5cac69b2edac3e3246fee03e8f4c2a1075238b
Linux

Linux · 2.6.39
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: drivers/media/dvb-frontends/dib7000p.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38695

Affected technology

linux kernel · from 5.1 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

debian linux · 11.0
debian

Linux · 5e5b511d8bfaf765cb92a695cda336c936cb86dc to before 6711ce7e9de4eb1a541ef30638df1294ea4267f8, 5e5b511d8bfaf765cb92a695cda336c936cb86dc to before 74bdf54a847dab209d2a8f65852f59b7fa156175, 5e5b511d8bfaf765cb92a695cda336c936cb86dc to before 5e25ee1ecec91c61a8acf938ad338399cad464de, 5e5b511d8bfaf765cb92a695cda336c936cb86dc to before add68606a01dcccf18837a53e85b85caf0693b4b, 5e5b511d8bfaf765cb92a695cda336c936cb86dc to before 7925dd68807cc8fd755b04ca99e7e6f1c04392e8, 5e5b511d8bfaf765cb92a695cda336c936cb86dc to before 571617f171f723b05f02d154a2e549a17eab4935, 5e5b511d8bfaf765cb92a695cda336c936cb86dc to before d3f55f46bb37a8ec73bfe3cfe36e3ecfa2945dfa, 5e5b511d8bfaf765cb92a695cda336c936cb86dc to before 46a0602c24d7d425dd8e00c749cd64a934aac7ec, 5e5b511d8bfaf765cb92a695cda336c936cb86dc to before 6698796282e828733cde3329c887b4ae9e5545e9
Linux

Linux · 5.1
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: drivers/scsi/lpfc/lpfc_scsi.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38696

Affected technology

linux kernel · from 4.14.77 (inclusive), before 4.15 (exclusive)
linux

linux kernel · from 4.18.15 (inclusive), before 4.19 (exclusive)
linux

linux kernel · from 4.19.1 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

linux kernel · 4.19
linux

linux kernel · 4.19 · update rc8
linux

debian linux · 11.0
debian

Linux · ea7e0480a4b695d0aa6b3fa99bd658a003122113 to before ab18e48a503230d675e824a0d68a108bdff42503, ea7e0480a4b695d0aa6b3fa99bd658a003122113 to before e78033e59444d257d095b73ce5d20625294f6ec2, ea7e0480a4b695d0aa6b3fa99bd658a003122113 to before bd90dbd196831f5c2620736dc221db2634cf1e8e, ea7e0480a4b695d0aa6b3fa99bd658a003122113 to before 5b6839b572b503609b9b58bc6c04a816eefa0794, ea7e0480a4b695d0aa6b3fa99bd658a003122113 to before f22de2027b206ddfb8a075800bb5d0dacf2da4b8, ea7e0480a4b695d0aa6b3fa99bd658a003122113 to before 82d140f6aab5e89a9d3972697a0dbe1498752d9b, ea7e0480a4b695d0aa6b3fa99bd658a003122113 to before 24d098b6f69b0aa806ffcb3e18259bee31650b28, ea7e0480a4b695d0aa6b3fa99bd658a003122113 to before cddf47d20b0325dc8a4e57b833fe96e8f36c42a4, ea7e0480a4b695d0aa6b3fa99bd658a003122113 to before e9f4a6b3421e936c3ee9d74710243897d74dbaa2, 86717a97f9218de798c6d33e0014ab9325e18f56, e4882348eaa9f5f052cb21d2a5aa99a063e4308b, 4.14.77 to before 4.15, 4.18.15 to before 4.19
Linux

Linux · 4.19
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: arch/mips/kernel/process.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38697

Affected technology

linux kernel · from 2.6.12.1 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

linux kernel · 2.6.12
linux

linux kernel · 2.6.12 · update rc2
linux

linux kernel · 2.6.12 · update rc3
linux

linux kernel · 2.6.12 · update rc4
linux

linux kernel · 2.6.12 · update rc5
linux

debian linux · 11.0
debian

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 5bdb9553fb134fd52ec208a8b378120670f6e784, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a4f199203f79ca9cd7355799ccb26800174ff093, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1467a75819e41341cd5ebd16faa2af1ca3c8f4fe, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 49ea46d9025aa1914b24ea957636cbe4367a7311, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 173cfd741ad7073640bfb7e2344c2a0ee005e769, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c8ca21a2836993d7cb816668458e05e598574e55, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2dd05f09cc323018136a7ecdb3d1007be9ede27f, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 30e19a884c0b11f33821aacda7e72e914bec26ef, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c214006856ff52a8ff17ed8da52d50601d54f9ce
Linux

Linux · 2.6.12
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: fs/jfs/jfs_dmap.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38698

Affected technology

linux kernel · from 2.6.12.1 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

linux kernel · 2.6.12
linux

linux kernel · 2.6.12 · update rc2
linux

linux kernel · 2.6.12 · update rc3
linux

linux kernel · 2.6.12 · update rc4
linux

linux kernel · 2.6.12 · update rc5
linux

debian linux · 11.0
debian

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 9f896c3d0192241d6438be6963682ace8203f502, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6bc86f1d7d5419d5b19483ba203ca0b760c41c51, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 9ad054cd2c4ca8c371e555748832aa217c41fc65, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 9605cb2ea38ba014d0e704cba0dbbb00593fa9fd, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 78989af5bbf55a0cf1165b0fa73921bc02f1543b, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 00462be586b33076f8b8023e7ba697deedc131db, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before fd9454b7710b28060faa49b041f8283c435721a3, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 02edcfda419168d9405bffe55f18ea9c1bf92366, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2d04df8116426b6c7b9f8b9b371250f666a2a2fb
Linux

Linux · 2.6.12
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: fs/jfs/file.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38699

Affected technology

linux kernel · from 2.6.33 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

linux kernel · 2.6.32
linux

linux kernel · 2.6.32 · update rc4
linux

linux kernel · 2.6.32 · update rc5
linux

linux kernel · 2.6.32 · update rc6
linux

linux kernel · 2.6.32 · update rc7
linux

linux kernel · 2.6.32 · update rc8
linux

debian linux · 11.0
debian

Linux · 7725ccfda59715ecf8f99e3b520a0b84cc2ea79e to before 684c92bb08a25ed3c0356bc7eb532ed5b19588dd, 7725ccfda59715ecf8f99e3b520a0b84cc2ea79e to before 9337c2affbaebe00b75fdf84ea0e2fcf93c140af, 7725ccfda59715ecf8f99e3b520a0b84cc2ea79e to before ba024d92564580bb90ec367248ace8efe16ce815, 7725ccfda59715ecf8f99e3b520a0b84cc2ea79e to before 8e03dd9fadf76db5b9799583074a1a2a54f787f1, 7725ccfda59715ecf8f99e3b520a0b84cc2ea79e to before 39cfe2c83146aad956318f866d0ee471b7a61fa5, 7725ccfda59715ecf8f99e3b520a0b84cc2ea79e to before 13f613228cf3c96a038424cd97aa4d6aadc66294, 7725ccfda59715ecf8f99e3b520a0b84cc2ea79e to before 8456f862cb95bcc3a831e1ba87c0c17068be0f3f, 7725ccfda59715ecf8f99e3b520a0b84cc2ea79e to before 50d9bd48321038bd6e15af5a454bbcd180cf6f80, 7725ccfda59715ecf8f99e3b520a0b84cc2ea79e to before add4c4850363d7c1b72e8fce9ccb21fdd2cf5dc9
Linux

Linux · 2.6.32
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
Function: fails
File: drivers/scsi/bfa/bfad_im.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38700

Affected technology

linux kernel · from 2.6.27 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

debian linux · 11.0
debian

Linux · 5d91e209fb21fb9cc765729d4c6a85a9fb6c9187 to before f53af99f441ee79599d8df6113a7144d74cf9153, 5d91e209fb21fb9cc765729d4c6a85a9fb6c9187 to before 9ea6d961566c7d762ed0204b06db05756fdda3b6, 5d91e209fb21fb9cc765729d4c6a85a9fb6c9187 to before fd5aad080edb501ab5c84b7623d612d0e3033403, 5d91e209fb21fb9cc765729d4c6a85a9fb6c9187 to before a145c269dc5380c063a20a0db7e6df2995962e9d, 5d91e209fb21fb9cc765729d4c6a85a9fb6c9187 to before 66a373f50b4249d57f5a88c7be9676f9d5884865, 5d91e209fb21fb9cc765729d4c6a85a9fb6c9187 to before 35782c32528d82aa21f84cb5ceb2abd3526a8159, 5d91e209fb21fb9cc765729d4c6a85a9fb6c9187 to before a33d42b7fc24fe03f239fbb0880dd5b4b4b97c19, 5d91e209fb21fb9cc765729d4c6a85a9fb6c9187 to before 2b242ea14386a510010eabfbfc3ce81a101f3802, 5d91e209fb21fb9cc765729d4c6a85a9fb6c9187 to before 3ea3a256ed81f95ab0f3281a0e234b01a9cae605
Linux

Linux · 2.6.27
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: drivers/scsi/libiscsi.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38701

Affected technology

linux kernel · from 3.8 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

debian linux · 11.0
debian

Linux · 67cf5b09a46f72e048501b84996f2f77bc42e947 to before 8085a7324d8ec448c4a764af7853e19bbd64e17a, 67cf5b09a46f72e048501b84996f2f77bc42e947 to before 1199a6399895f4767f0b9a68a6ff47c3f799b7c7, 67cf5b09a46f72e048501b84996f2f77bc42e947 to before 7f322c12df7aeed1755acd3c6fab48c7807795fb, 67cf5b09a46f72e048501b84996f2f77bc42e947 to before 2817ac83cb4732597bf36853fe13ca616f4ee4e2, 67cf5b09a46f72e048501b84996f2f77bc42e947 to before d960f4b793912f35e9d72bd9d1e90553063fcbf1, 67cf5b09a46f72e048501b84996f2f77bc42e947 to before 81e7e2e7ba07e7c8cdce43ccad2f91adbc5a919c, 67cf5b09a46f72e048501b84996f2f77bc42e947 to before 279c87ef7b9da34f65c2e4db586e730b667a6fb9, 67cf5b09a46f72e048501b84996f2f77bc42e947 to before 8a6f89d42e61788605722dd9faf98797c958a7e5, 67cf5b09a46f72e048501b84996f2f77bc42e947 to before 099b847ccc6c1ad2f805d13cfbcc83f5b6d4bc42
Linux

Linux · 3.8
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

Component: Not specified by the source
File: fs/ext4/inline.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38706

Affected technology

linux kernel · from 5.6 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

debian linux · 11.0
debian

Linux · 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 to before 8b465bedc2b417fd27c1d1ab7122882b4b60b1a0, 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 to before 82ba7b8cf9f6e3bf392a9f08ba3d1c0b200ccb94, 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 to before 7f8fc03712194fd4e2df28af7f7f7a38205934ef, 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 to before 41f53afe53a57a7c50323f99424b598190acf192, 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 to before 2fce20decc6a83f16dd73744150c4e7ea6c97c21, 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 to before cecc65827ef3df9754e097582d89569139e6cd1e, 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 to before 7ce0a7255ce97ed7c54afae83fdbce712a1f0c9e, 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 to before 2d91cb261cac6d885954b8f5da28b5c176c18131
Linux

Linux · 5.6
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: sound/soc/soc-core.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38707

Affected technology

linux kernel · from 5.15 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

debian linux · 11.0
debian

Linux · 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e to before bde58c1539f3ffddffc94d64007de16964e6b8eb, 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e to before f99eb9a641f4ef927d8724f4966dcfd1f0e9f835, 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e to before 3572737a768dadea904ebc4eb34b6ed575bb72d9, 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e to before 2ac47f738ddfc1957a33be163bc97ee8f78e85a6, 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e to before b51642fc52d1c7243a9361555d5c4b24d7569d7e, 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e to before 27ee9a42b245efe6529e28b03453291a775cb3e4, 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e to before e841ecb139339602bc1853f5f09daa5d1ea920a2
Linux

Linux · 5.15
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: fs/ntfs3/dir.c, name

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38708

Affected technology

linux kernel · from 4.5 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

debian linux · 11.0
debian

Linux · 668700b40a7c8727bbd2b3fd4fd22e0ce3f1aeb6 to before 0336bfe9c237476bd7c45605a36ca79c2bca62e5, 668700b40a7c8727bbd2b3fd4fd22e0ce3f1aeb6 to before 810cd546a29bfac90ed1328ea01d693d4bd11cb1, 668700b40a7c8727bbd2b3fd4fd22e0ce3f1aeb6 to before 84ef8dd3238330d1795745ece83b19f0295751bf, 668700b40a7c8727bbd2b3fd4fd22e0ce3f1aeb6 to before 57418de35420cedab035aa1da8a26c0499b7f575, 668700b40a7c8727bbd2b3fd4fd22e0ce3f1aeb6 to before 9f53b2433ad248cd3342cc345f56f5c7904bd8c4, 668700b40a7c8727bbd2b3fd4fd22e0ce3f1aeb6 to before 7d483ad300fc0a06f69b019dda8f74970714baf8, 668700b40a7c8727bbd2b3fd4fd22e0ce3f1aeb6 to before 46e3763dcae0ffcf8fcfaff4fc10a90a92ffdd89, 668700b40a7c8727bbd2b3fd4fd22e0ce3f1aeb6 to before 3a896498f6f577e57bf26aaa93b48c22b6d20c20, 668700b40a7c8727bbd2b3fd4fd22e0ce3f1aeb6 to before 00c9c9628b49e368d140cfa61d7df9b8922ec2a8
Linux

Linux · 4.5
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

Component: Not specified by the source
File: drivers/block/drbd/drbd_receiver.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38711

Affected technology

linux kernel · from 5.15 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

debian linux · 11.0
debian

Linux · 0626e6641f6b467447c81dd7678a69c66f7746cf to before 9d5012ffe14120f978ee34aef4df3d6cb026b7c4, 0626e6641f6b467447c81dd7678a69c66f7746cf to before ac98d54630d5b52e3f684d872f0d82c06c418ea9, 0626e6641f6b467447c81dd7678a69c66f7746cf to before 1e858a7a51c7b8b009d8f246de7ceb7743b44a71, 0626e6641f6b467447c81dd7678a69c66f7746cf to before 814cfdb6358d9b84fcbec9918c8f938cc096a43a, 0626e6641f6b467447c81dd7678a69c66f7746cf to before a7dddd62578c2eb6cb28b8835556a121b5157323, 0626e6641f6b467447c81dd7678a69c66f7746cf to before a726fef6d7d4cfc365d3434e3916dbfe78991a33, 0626e6641f6b467447c81dd7678a69c66f7746cf to before d5fc1400a34b4ea5e8f2ce296ea12bf8c8421694
Linux

Linux · 5.15
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: fs/smb/server/smb2pdu.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38712

Affected technology

linux kernel · from 3.13 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

debian linux · 11.0
debian

Linux · 95e0d7dbb9b28ab0dfad7c7316066b05e1f1d4cd to before bb0eea8e375677f586ad11c12e2525ed3fc698c2, 95e0d7dbb9b28ab0dfad7c7316066b05e1f1d4cd to before 9046566fa692f88954dac8c510f37ee17a15fdb7, 95e0d7dbb9b28ab0dfad7c7316066b05e1f1d4cd to before 03cd1db1494cf930e2fa042c9c13e32bffdb4eba, 95e0d7dbb9b28ab0dfad7c7316066b05e1f1d4cd to before dee5c668ad71ddbcb4b48d95e8a4f371314ad41d, 95e0d7dbb9b28ab0dfad7c7316066b05e1f1d4cd to before b3359392b75395a31af739a761f48f4041148226, 95e0d7dbb9b28ab0dfad7c7316066b05e1f1d4cd to before 1bb8da27ff15e346d4bc9e248e819c9a88ebf9d6, 95e0d7dbb9b28ab0dfad7c7316066b05e1f1d4cd to before d768e3ed430e89a699bf89d3214dcbbf4648c939, 95e0d7dbb9b28ab0dfad7c7316066b05e1f1d4cd to before ce5e387f396cbb5c061d9837abcac731e9e06f4d, 95e0d7dbb9b28ab0dfad7c7316066b05e1f1d4cd to before c7c6363ca186747ebc2df10c8a1a51e66e0e32d9
Linux

Linux · 3.13
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: fs/hfsplus/xattr.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38713

Affected technology

linux kernel · from 2.6.12.1 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

linux kernel · 2.6.12
linux

linux kernel · 2.6.12 · update rc2
linux

linux kernel · 2.6.12 · update rc3
linux

linux kernel · 2.6.12 · update rc4
linux

linux kernel · 2.6.12 · update rc5
linux

debian linux · 11.0
debian

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 73f7da507d787b489761a0fa280716f84fa32b2f, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 76a4c6636a69d69409aa253b049b1be717a539c5, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ccf0ad56a779e6704c0b27f555dec847f50c7557, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 13604b1d7e7b125fb428cddbec6b8d92baad25d5, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 291bb5d931c6f3cd7227b913302a17be21cf53b0, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f7534cbfac0a9ffa4fa17cacc6e8b6446dae24ee, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6f93694bcbc2c2ab3e01cd8fba2f296faf34e6b9, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1ca69007e52a73bd8b84b988b61b319816ca8b01, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 94458781aee6045bd3d0ad4b80b02886b9e2219b
Linux

Linux · 2.6.12
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: fs/hfsplus/unicode.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38714

Affected technology

linux kernel · from 2.6.13 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

linux kernel · 2.6.12
linux

linux kernel · 2.6.12 · update rc2
linux

linux kernel · 2.6.12 · update rc3
linux

linux kernel · 2.6.12 · update rc4
linux

linux kernel · 2.6.12 · update rc5
linux

debian linux · 11.0
debian

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 032f7ed6717a4cd3714f9801be39fdfc7f1c7644, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ffee8a7bed0fbfe29da239a922b59c5db897c613, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 5ab59229bef6063edf3a6fc2e3e3fd7cd2181b29, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a2abd574d2fe22b8464cf6df5abb6f24d809eac0, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8583d067ae22b7f32ce5277ca5543ac8bf86a3e5, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 475d770c19929082aab43337e6c077d0e2043df3, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 291b7f2538920aa229500dbdd6c5f0927a51bc8b, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7fa4cef8ea13b37811287ef60674c5fd1dd02ee6, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c80aa2aaaa5e69d5219c6af8ef7e754114bd08d2
Linux

Linux · 2.6.12
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: fs/hfsplus/bnode.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38715

Affected technology

linux kernel · from 2.6.12.1 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

linux kernel · 2.6.12
linux

linux kernel · 2.6.12 · update rc2
linux

linux kernel · 2.6.12 · update rc3
linux

linux kernel · 2.6.12 · update rc4
linux

linux kernel · 2.6.12 · update rc5
linux

debian linux · 11.0
debian

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before e7d2dc2421e821e4045775e6dc226378328de6f6, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 67ecc81f6492275c9c54280532f558483c99c90e, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a1a60e79502279f996e55052f50cc14919020475, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before fe2891a9c43ab87d1a210d61e6438ca6936e2f62, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 384a66b89f9540a9a8cb0f48807697dfabaece4c, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before efc095b35b23297e419c2ab4fc1ed1a8f0781a29, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before fc7f732984ec91f30be3e574e0644066d07f2b78, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before eec522fd0d28106b14a59ab2d658605febe4a3bb, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a431930c9bac518bf99d6b1da526a7f37ddee8d8
Linux

Linux · 2.6.12
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: fs/hfs/bnode.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38718

Affected technology

linux kernel · from 4.8 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

debian linux · 11.0
debian

Linux · 90017accff61ae89283ad9a51f9ac46ca01633fb to before d0194e391bb493aa6cec56d177b14df6b29188d5, 90017accff61ae89283ad9a51f9ac46ca01633fb to before 03d0cc6889e02420125510b5444b570f4bbf53d5, 90017accff61ae89283ad9a51f9ac46ca01633fb to before cd0e92bb2b7542fb96397ffac639b4f5b099d0cb, 90017accff61ae89283ad9a51f9ac46ca01633fb to before 4506bcaabe004d07be8ff09116a3024fbd6aa965, 90017accff61ae89283ad9a51f9ac46ca01633fb to before ea094f38d387d1b0ded5dee4a3e5720aa4ce0139, 90017accff61ae89283ad9a51f9ac46ca01633fb to before 7d757f17bc2ef2727994ffa6d5d6e4bc4789a770, 90017accff61ae89283ad9a51f9ac46ca01633fb to before fc66772607101bd2030a4332b3bd0ea3b3605250, 90017accff61ae89283ad9a51f9ac46ca01633fb to before 1bd5214ea681584c5886fea3ba03e49f93a43c0e, 90017accff61ae89283ad9a51f9ac46ca01633fb to before fd60d8a086191fe33c2d719732d2482052fa6805
Linux

Linux · 4.8
Linux

Component: Not specified by the source
File: net/sctp/input.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38721

Affected technology

linux kernel · from 2.6.19 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

linux kernel · 2.6.18
linux

linux kernel · 2.6.18 · update rc5
linux

linux kernel · 2.6.18 · update rc6
linux

linux kernel · 2.6.18 · update rc7
linux

linux kernel · 6.17 · update rc1
linux

debian linux · 11.0
debian

Linux · d205dc40798d97d63ad348bfaf7394f445d152d4 to before 586892e341fbf698e7cbaca293e1353957db725a, d205dc40798d97d63ad348bfaf7394f445d152d4 to before 962518c6ca9f9a13df099cafa429f72f68ad61f0, d205dc40798d97d63ad348bfaf7394f445d152d4 to before 19b909a4b1452fb97e477d2f08b97f8d04095619, d205dc40798d97d63ad348bfaf7394f445d152d4 to before 41462f4cfc583513833f87f9ee55d12da651a7e3, d205dc40798d97d63ad348bfaf7394f445d152d4 to before 30cf811058552b8cd0e98dff677ef3f89d6d34ce, d205dc40798d97d63ad348bfaf7394f445d152d4 to before a2cb4df7872de069f809de2f076ec8e54d649fe3, d205dc40798d97d63ad348bfaf7394f445d152d4 to before e14f72aa66c029db106921d621edcedef68e065b, d205dc40798d97d63ad348bfaf7394f445d152d4 to before a62d6aa3f31f216b637a4c71b7a8bfc7c57f049b, d205dc40798d97d63ad348bfaf7394f445d152d4 to before de788b2e6227462b6dcd0e07474e72c089008f74
Linux

Linux · 2.6.18
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/netfilter/nf_conntrack_netlink.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38724

Affected technology

linux kernel · from 3.17 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

debian linux · 11.0
debian

Linux · d20c11d86d8f821a64eac7d6c8f296f06d935f4f to before 3f252a73e81aa01660cb426735eab932e6182e8d, d20c11d86d8f821a64eac7d6c8f296f06d935f4f to before d35ac850410966010e92f401f4e21868a9ea4d8b, d20c11d86d8f821a64eac7d6c8f296f06d935f4f to before f3aac6cf390d8b80e1d82975faf4ac61175519c0, d20c11d86d8f821a64eac7d6c8f296f06d935f4f to before 22f45cedf281e6171817c8a3432c44d788c550e1, d20c11d86d8f821a64eac7d6c8f296f06d935f4f to before d71abd1ae4e0413707cd42b10c24a11d1aa71772, d20c11d86d8f821a64eac7d6c8f296f06d935f4f to before 74ad36ed60df561a303a19ecef400c7096b20306, d20c11d86d8f821a64eac7d6c8f296f06d935f4f to before 36e83eda90e0e4ac52f259f775b40b2841f8a0a3, d20c11d86d8f821a64eac7d6c8f296f06d935f4f to before 571a5e46c71490285d2d8c06f6b5a7cbf6c7edd1, d20c11d86d8f821a64eac7d6c8f296f06d935f4f to before 908e4ead7f757504d8b345452730636e298cbf68
Linux

Linux · 3.17
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

Component: Not specified by the source
File: fs/nfsd/nfs4state.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38725

Affected technology

linux kernel · from 5.14 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

debian linux · 11.0
debian

Linux · e532a096be0e5e570b383e71d4560e7f04384e0f to before 75947d3200de98a9ded9ad8972e02f1a177097fe, e532a096be0e5e570b383e71d4560e7f04384e0f to before 59ed6fbdb1bc03316e09493ffde7066f031c7524, e532a096be0e5e570b383e71d4560e7f04384e0f to before ccef5ee4adf56472aa26bdd1f821a6d0cd06089a, e532a096be0e5e570b383e71d4560e7f04384e0f to before ee2cd40b0bb46056949a2319084a729d95389386, e532a096be0e5e570b383e71d4560e7f04384e0f to before a754ab53993b1585132e871c5d811167ad3c52ff, e532a096be0e5e570b383e71d4560e7f04384e0f to before ad1f8313aeec0115f9978bd2d002ef4a8d96c773, e532a096be0e5e570b383e71d4560e7f04384e0f to before 4faff70959d51078f9ee8372f8cff0d7045e4114
Linux

Linux · 5.14
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: drivers/net/usb/asix_devices.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38729

Affected technology

linux kernel · from 4.17 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

debian linux · 11.0
debian

Linux · 9a2fe9b801f585baccf8352d82839dcd54b300cf to before 1666207ba0a5973735ef010812536adde6174e81, 9a2fe9b801f585baccf8352d82839dcd54b300cf to before ebc9e06b6ea978a20abf9b87d41afc51b2d745ac, 9a2fe9b801f585baccf8352d82839dcd54b300cf to before f03418bb9d542f44df78eec2eff4ac83c0a8ac0d, 9a2fe9b801f585baccf8352d82839dcd54b300cf to before 40714daf4d0448e1692c78563faf0ed0f9d9b5c7, 9a2fe9b801f585baccf8352d82839dcd54b300cf to before 07c8d78dbb5e0ff8b23f7fd69cd1d4e2ba22b3dc, 9a2fe9b801f585baccf8352d82839dcd54b300cf to before cd08d390d15b204cac1d3174f5f149a20c52e61a, 9a2fe9b801f585baccf8352d82839dcd54b300cf to before 29b415ec09f5b9d1dfa2423b826725a8c8796b9a, 9a2fe9b801f585baccf8352d82839dcd54b300cf to before 452ad54f432675982cc0d6eb6c40a6c86ac61dbd, 9a2fe9b801f585baccf8352d82839dcd54b300cf to before d832ccbc301fbd9e5a1d691bdcf461cdb514595f
Linux

Linux · 4.17
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: sound/usb/validate.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38732

Affected technology

linux kernel · from 5.9 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.44 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.4 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

debian linux · 11.0
debian

Linux · f53b9b0bdc59c0823679f2e3214e0d538f5951b9 to before 7b8b503c06274ef3c6c1a107743f1ec0d0a53ef8, f53b9b0bdc59c0823679f2e3214e0d538f5951b9 to before 82ef97abf22790182f7d433c74960dfd61b99c33, f53b9b0bdc59c0823679f2e3214e0d538f5951b9 to before b7a885ba25960c91db237c3f83b4285156789bce, f53b9b0bdc59c0823679f2e3214e0d538f5951b9 to before a0a3ace2a57887dac1e7c9a724846040c3e31868, f53b9b0bdc59c0823679f2e3214e0d538f5951b9 to before 51e8531371f90bee742c63775c9a568e5d6bf3c5, f53b9b0bdc59c0823679f2e3214e0d538f5951b9 to before b32e1590a8d22cf7d7f965e46d5576051acf8e42, f53b9b0bdc59c0823679f2e3214e0d538f5951b9 to before 91a79b792204313153e1bdbbe5acbfc28903b3a5
Linux

Linux · 5.9
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/ipv4/netfilter/nf_reject_ipv4.c, net/ipv6/netfilter/nf_reject_ipv6.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39673

Affected technology

linux kernel · from 5.13 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.44 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.4 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

debian linux · 11.0
debian

Linux · f6efc675c9dd8d93f826b79ae7e33e03301db609 to before 9a1969fbffc1f1900d92d7594b1b7d8d72ef3dc7, f6efc675c9dd8d93f826b79ae7e33e03301db609 to before 0f1630be6fcca3f0c63e4b242ad202e5cde28a40, f6efc675c9dd8d93f826b79ae7e33e03301db609 to before ca18d751bcc9faf5b7e82e9fae1223d103928181, f6efc675c9dd8d93f826b79ae7e33e03301db609 to before 94731cc551e29511d85aa8dec61a6c071b1f2430, f6efc675c9dd8d93f826b79ae7e33e03301db609 to before f97f6475fdcb3c28ff3c55cc4b7bde632119ec08, f6efc675c9dd8d93f826b79ae7e33e03301db609 to before 0417adf367a0af11adf7ace849af4638cfb573f7
Linux

Linux · 5.13
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: drivers/net/ppp/ppp_generic.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39675

Affected technology

linux kernel · from 5.8 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.44 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.4 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

debian linux · 11.0
debian

Linux · 2deade5ede56581722c0d7672f28b09548dc0fc4 to before 2af45aadb7b5d3852c76e2d1e985289ada6f48bf, 2deade5ede56581722c0d7672f28b09548dc0fc4 to before ee0373b20bb67b1f00a1b25ccd24c8ac996b6446, 2deade5ede56581722c0d7672f28b09548dc0fc4 to before 857b8387a9777e42b36e0400be99b54c251eaf9a, 2deade5ede56581722c0d7672f28b09548dc0fc4 to before 97fc94c5fd3c6ac5a13e457d38ee247737b8c4bd, 2deade5ede56581722c0d7672f28b09548dc0fc4 to before 2ee86b764c54e0d6a5464fb023b630fdf20869cd, 2deade5ede56581722c0d7672f28b09548dc0fc4 to before 7a2ca2ea64b1b63c8baa94a8f5deb70b2248d119
Linux

Linux · 5.8
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
Function: return
File: drivers/gpu/drm/amd/display/modules/hdcp/hdcp_psp.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39676

Affected technology

linux kernel · from 3.2.1 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.44 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.4 (exclusive)
linux

linux kernel · 3.2
linux

linux kernel · 3.2 · update rc7
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

debian linux · 11.0
debian

Linux · 13483730a13bef372894aefcf73760f5c6c297be to before d0225f41ee70611ca88ccb22c8542ecdfa7faea8, 13483730a13bef372894aefcf73760f5c6c297be to before ad8a9d38d30c691a77c456e72b78f7932d4f234d, 13483730a13bef372894aefcf73760f5c6c297be to before 325bf7d57c4e2a341e381c5805e454fb69dd78c3, 13483730a13bef372894aefcf73760f5c6c297be to before 46288d12d1c30d08fbeffd05abc079f57a43a2d4, 13483730a13bef372894aefcf73760f5c6c297be to before f5ad0819f902b4b33591791b92a0350fb3692a6b, 13483730a13bef372894aefcf73760f5c6c297be to before f1424c830d6ce840341aac33fe99c8ac45447ac1, 13483730a13bef372894aefcf73760f5c6c297be to before f4bc3cdfe95115191e24592bbfc15f1d4a705a75, 13483730a13bef372894aefcf73760f5c6c297be to before 9dcf111dd3e7ed5fce82bb108e3a3fc001c07225
Linux

Linux · 3.2
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
Function: is
File: drivers/scsi/qla4xxx/ql4_os.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39681

Affected technology

linux kernel · from 5.8 (inclusive), before 5.10.242 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.44 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.4 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

debian linux · 11.0
debian

Linux · 923f3a2b48bdccb6a1d1f0dd48de03de7ad936d9 to before 62f12cde10118253348a7540e85606869bd69432, 923f3a2b48bdccb6a1d1f0dd48de03de7ad936d9 to before 873f32201df8876bdb2563e3187e79149427cab4, 923f3a2b48bdccb6a1d1f0dd48de03de7ad936d9 to before fb81222c1559f89bfe3aa1010f6d112531d55353, 923f3a2b48bdccb6a1d1f0dd48de03de7ad936d9 to before 7207923d8453ebfb35667c1736169f2dd796772e, 923f3a2b48bdccb6a1d1f0dd48de03de7ad936d9 to before a9e5924daa954c9f585c1ca00358afe71d6781c4, 923f3a2b48bdccb6a1d1f0dd48de03de7ad936d9 to before d23264c257a70dbe021b43b3bc2ee16134cd2c69, 923f3a2b48bdccb6a1d1f0dd48de03de7ad936d9 to before d8df126349dad855cdfedd6bbf315bad2e901c2f
Linux

Linux · 5.8
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: arch/x86/kernel/cpu/hygon.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39683

Affected technology

linux kernel · from 4.4.269 (inclusive), before 4.5 (exclusive)
linux

linux kernel · from 4.9.269 (inclusive), before 4.10 (exclusive)
linux

linux kernel · from 4.14.233 (inclusive), before 4.15 (exclusive)
linux

linux kernel · from 4.19.191 (inclusive), before 4.20 (exclusive)
linux

linux kernel · from 5.4.118 (inclusive), before 5.5 (exclusive)
linux

linux kernel · from 5.10.36 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11.20 (inclusive), before 5.12 (exclusive)
linux

linux kernel · from 5.12.3 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.44 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.4 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

debian linux · 11.0
debian

Linux · 634684d79733124f7470b226b0f42aada4426b07 to before b842ef39c2ad6156c13afdec25ecc6792a9b67b9, 8c9af478c06bb1ab1422f90d8ecbc53defd44bc3 to before 41b838420457802f21918df66764b6fbf829d330, 8c9af478c06bb1ab1422f90d8ecbc53defd44bc3 to before 418b448e1d7470da9d4d4797f71782595ee69c49, 8c9af478c06bb1ab1422f90d8ecbc53defd44bc3 to before 58ff8064cb4c7eddac4da1a59da039ead586950a, 8c9af478c06bb1ab1422f90d8ecbc53defd44bc3 to before d0c68045b8b0f3737ed7bd6b8c83b7887014adee, 8c9af478c06bb1ab1422f90d8ecbc53defd44bc3 to before 3079517a5ba80901fe828a06998da64b9b8749be, 8c9af478c06bb1ab1422f90d8ecbc53defd44bc3 to before 6a909ea83f226803ea0e718f6e88613df9234d58, 24cd31752f47699b89b4b3471155c8e599a1a23a, e9cb474de7ff7a970c2a3951c12ec7e3113c0c35, 6ab671191f64b0da7d547e2ad4dc199ca7e5b558, 3d9281a4ac7171c808f9507f0937eb236b353905, 0b641b25870f02e2423e494365fc5243cc1e2759, ffd51dbfd2900e50c71b5c069fe407957e52d61f, cdd107d7f18158d966c2bc136204fe826dac445c, 5.10.36 to before 5.10.241, 4.4.269 to before 4.5, 4.9.269 to before 4.10, 4.14.233 to before 4.15, 4.19.191 to before 4.20, 5.4.118 to before 5.5, 5.11.20 to before 5.12, 5.12.3 to before 5.13
Linux

Linux · 5.13
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

Component: Not specified by the source
File: kernel/trace/trace.c, kernel/trace/trace.h

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39684

Affected technology

linux kernel · from 2.6.29 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.44 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.4 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

debian linux · 11.0
debian

Linux · ed9eccbe8970f6eedc1b978c157caf1251a896d4 to before 868a1b68dcd9f2805bb86aa64862402f785d8c4a, ed9eccbe8970f6eedc1b978c157caf1251a896d4 to before ff4a7c18799c7fe999fa56c5cf276e13866b8c1a, ed9eccbe8970f6eedc1b978c157caf1251a896d4 to before d84f6e77ebe3359394df32ecd97e0d76a25283dc, ed9eccbe8970f6eedc1b978c157caf1251a896d4 to before f3b0c9ec54736f3b8118f93a473d22e11ee65743, ed9eccbe8970f6eedc1b978c157caf1251a896d4 to before aecf0d557ddd95ce68193a5ee1dc4c87415ff08a, ed9eccbe8970f6eedc1b978c157caf1251a896d4 to before 3cd212e895ca2d58963fdc6422502b10dd3966bb
Linux

Linux · 2.6.29
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: drivers/comedi/comedi_fops.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39685

Affected technology

linux kernel · from 3.13 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.44 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.4 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

debian linux · 11.0
debian

Linux · fff46207245cd9e39c05b638afaee2478e64914b to before bab220b0bb5af652007e278e8e8357f952b0e1ea, fff46207245cd9e39c05b638afaee2478e64914b to before 5a33d07c94ba91306093e823112a7aa9727549f6, fff46207245cd9e39c05b638afaee2478e64914b to before 0eb4ed2aa261dee228f1668dbfa6d87353e8162d, fff46207245cd9e39c05b638afaee2478e64914b to before a3cfcd0c78c80ca7cd80372dc28f77d01be57bf6, fff46207245cd9e39c05b638afaee2478e64914b to before d8992c9a01f81128f36acb7c5755530e21fcd059, fff46207245cd9e39c05b638afaee2478e64914b to before 96cb948408b3adb69df7e451ba7da9d21f814d00
Linux

Linux · 3.13
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: drivers/comedi/drivers/pcl726.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39686

Affected technology

linux kernel · from 2.6.29 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.44 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.4 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

debian linux · 11.0
debian

Linux · ed9eccbe8970f6eedc1b978c157caf1251a896d4 to before ab77e85bd3bc006ef40738f26f446a660813da44, ed9eccbe8970f6eedc1b978c157caf1251a896d4 to before ae8bc1f07bcb31b8636420e03d1f9c3df6219a2b, ed9eccbe8970f6eedc1b978c157caf1251a896d4 to before 842f307a1d115b24f2bcb2415c4e344f11f55930, ed9eccbe8970f6eedc1b978c157caf1251a896d4 to before 92352ed2f9ac422181e381c2430c2d0dfb46faa0, ed9eccbe8970f6eedc1b978c157caf1251a896d4 to before dc0a2f142d655700db43de90cb6abf141b73d908, ed9eccbe8970f6eedc1b978c157caf1251a896d4 to before 7afba9221f70d4cbce0f417c558879cba0eb5e66
Linux

Linux · 2.6.29
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: drivers/comedi/drivers.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39687

Affected technology

linux kernel · from 5.10 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.44 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.4 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

debian linux · 11.0
debian

Linux · 403e5586b52e466893ce3a7b7f3a3ecdc4c82d3e to before fd441fd972067f80861a0b66605c0febb0d038dd, 403e5586b52e466893ce3a7b7f3a3ecdc4c82d3e to before d8c5d87a431596e0e02bd7fe3bff952b002a03bb, 403e5586b52e466893ce3a7b7f3a3ecdc4c82d3e to before 83f14c4ca1ad78fcfb3e0de07d6d8a0c59550fc2, 403e5586b52e466893ce3a7b7f3a3ecdc4c82d3e to before 99b508340d0d1b9de0856c48c77898b14c0df7cf, 403e5586b52e466893ce3a7b7f3a3ecdc4c82d3e to before cce55ca4e7a221d5eb2c0b757a868eacd6344e4a, 403e5586b52e466893ce3a7b7f3a3ecdc4c82d3e to before 8acd9a0eaa8c9a28e385c0a6a56bb821cb549771, 403e5586b52e466893ce3a7b7f3a3ecdc4c82d3e to before 433b99e922943efdfd62b9a8e3ad1604838181f2
Linux

Linux · 5.10
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: drivers/iio/light/as73211.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39689

Affected technology

linux kernel · from 4.12 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.44 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.4 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

debian linux · 11.0
debian

Linux · c20489dad156dd9919ebd854bbace46dbd2576a3 to before 12064e1880fc9202be75ff668205b1703d92f74f, c20489dad156dd9919ebd854bbace46dbd2576a3 to before c4cd93811e038d19f961985735ef7bb128078dfb, c20489dad156dd9919ebd854bbace46dbd2576a3 to before e0b6b223167e1edde5c82edf38e393c06eda1f13, c20489dad156dd9919ebd854bbace46dbd2576a3 to before a40c69f4f1ed96acbcd62e9b5ff3a596f0a91309, c20489dad156dd9919ebd854bbace46dbd2576a3 to before 3b114a3282ab1a12cb4618a8f45db5d7185e784a, c20489dad156dd9919ebd854bbace46dbd2576a3 to before c591ba1acd081d4980713e47869dd1cc3d963d19, c20489dad156dd9919ebd854bbace46dbd2576a3 to before 64db338140d2bad99a0a8c6a118dd60b3e1fb8cb, c20489dad156dd9919ebd854bbace46dbd2576a3 to before bfb336cf97df7b37b2b2edec0f69773e06d11955
Linux

Linux · 4.12
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

Component: Not specified by the source
Function: calls
File: kernel/trace/ftrace.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39691

Affected technology

linux kernel · from 2.6.13 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.44 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.4 (exclusive)
linux

linux kernel · 2.6.12
linux

linux kernel · 2.6.12 · update rc2
linux

linux kernel · 2.6.12 · update rc3
linux

linux kernel · 2.6.12 · update rc4
linux

linux kernel · 2.6.12 · update rc5
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

debian linux · 11.0
debian

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 70a09115da586bf662c3bae9c0c4a1b99251fad9, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 3169edb8945c295cf89120fc6b2c35cfe3ad4c9e, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 03b40bf5d0389ca23ae6857ee25789f0e0b47ce8, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c58c6b532b7b69537cfd9ef701c7e37cdcf79dc4, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c5aa6ba1127307ab5dc3773eaf40d73a3423841f, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 042cf48ecf67f72c8b3846c7fac678f472712ff3, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 90b5193edb323fefbee0e4e5bc39ed89dcc37719, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7375f22495e7cd1c5b3b5af9dcc4f6dffe34ce49
Linux

Linux · 2.6.12
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: fs/buffer.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39693

Affected technology

linux kernel · from 4.15 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.44 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.4 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

debian linux · 11.0
debian

Linux · 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 9c92d12b5cb9d9d88c12ae71794d3a7382fcdec0, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 6f860abff89417c0354b6ee5bbca188a233c5762, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 36a6b43573d152736eaf2557fe60580dd73e9350, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before f653dd30839eb4f573a7539e90b8a58ff9bedf2f, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 0c1a486cbe6f9cb194e3c4a8ade4af2a642ba165, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 07b93a5704b0b72002f0c4bd1076214af67dc661
Linux

Linux · 4.15
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39697

Affected technology

linux kernel · from 4.14 (inclusive), before 5.10.242 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.191 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.150 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.104 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.44 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.4 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

debian linux · 11.0
debian

Linux · bd37d6fce184836bd5e7cd90ce40116a4fadaf2a to before 0ff42a32784e0f2cb46a46da8e9f473538c13e1b, bd37d6fce184836bd5e7cd90ce40116a4fadaf2a to before f230d40147cc37eb3aef4d50e2e2c06ea73d9a77, bd37d6fce184836bd5e7cd90ce40116a4fadaf2a to before c32e3c71aaa1c1ba05da88605e2ddd493c58794f, bd37d6fce184836bd5e7cd90ce40116a4fadaf2a to before 181feb41f0b268e6288bf9a7b984624d7fe2031d, bd37d6fce184836bd5e7cd90ce40116a4fadaf2a to before 92278ae36935a54e65fef9f8ea8efe7e80481ace, bd37d6fce184836bd5e7cd90ce40116a4fadaf2a to before 202a3432d21ac060629a760fff3b0a39859da3ea, bd37d6fce184836bd5e7cd90ce40116a4fadaf2a to before 76d2e3890fb169168c73f2e4f8375c7cc24a765e
Linux

Linux · 4.14
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

Component: Not specified by the source
File: fs/nfs/pagelist.c, fs/nfs/write.c, include/linux/nfs_page.h

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39702

Affected technology

linux kernel · from 4.10 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.44 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.4 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

debian linux · 11.0
debian

Linux · bf355b8d2c30a289232042cacc1cfaea4923936c to before ff55a452d56490047f5233cc48c5d933f8586884, bf355b8d2c30a289232042cacc1cfaea4923936c to before 3b348c9c8d2ca2c67559ffd0e258ae7e1107d4f0, bf355b8d2c30a289232042cacc1cfaea4923936c to before 86b6d34717fe0570afce07ee79b8eeb40341f831, bf355b8d2c30a289232042cacc1cfaea4923936c to before 3ddd55cf19ed6cc62def5e3af10c2a9df1b861c3, bf355b8d2c30a289232042cacc1cfaea4923936c to before b3967c493799e63f648e9c7b6cb063aa2aed04e7, bf355b8d2c30a289232042cacc1cfaea4923936c to before f7878d47560d61e3f370aca3cebb8f42a55b990a, bf355b8d2c30a289232042cacc1cfaea4923936c to before a458b2902115b26a25d67393b12ddd57d1216aaa
Linux

Linux · 4.10
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
Function: for
File: net/ipv6/seg6_hmac.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39703

Affected technology

linux kernel · from 5.10.42 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.12.9 (inclusive), before 5.13 (exclusive)
linux

linux kernel · from 5.13.1 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.44 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.4 (exclusive)
linux

linux kernel · 5.13
linux

linux kernel · 5.13 · update rc4
linux

linux kernel · 5.13 · update rc5
linux

linux kernel · 5.13 · update rc6
linux

linux kernel · 5.13 · update rc7
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

debian linux · 11.0
debian

Linux · f6442ee08fe66c8e45c4f246531a2aaf4f17a7a7 to before 8d9bc4a375a1ba05f7dfa0407de8e510ab9bd14d, 48b491a5cc74333c4a6a82fe21cea42c055a3b0b to before 3ae272ab523dd6bdc26e879027ed79feac9dd1b3, 48b491a5cc74333c4a6a82fe21cea42c055a3b0b to before b640188b8a6690e685939053c7efdbc7818b5f4e, 48b491a5cc74333c4a6a82fe21cea42c055a3b0b to before b117c41b00902c1a7e24347c405cb82504aeae0b, 48b491a5cc74333c4a6a82fe21cea42c055a3b0b to before acd69b597bd3f76d3b3d322b84082226c00eeaa4, 48b491a5cc74333c4a6a82fe21cea42c055a3b0b to before 61009439e4bd8d74e705ee15940760321be91d8a, 48b491a5cc74333c4a6a82fe21cea42c055a3b0b to before 7af76e9d18a9fd6f8611b3313c86c190f9b6a5a7, 4ffd1d4a6b306ff69cbe412d2c54d2dd349ff436, 5.10.42 to before 5.10.241, 5.12.9 to before 5.13
Linux

Linux · 5.13
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: net/hsr/hsr_slave.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39709

Affected technology

linux kernel · from 4.13 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.44 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.4 (exclusive)
linux

debian linux · 11.0
debian

Linux · af2c3834c8ca7cc65d15592ac671933df8848115 to before 18c2b2bd982b8546312c9a7895515672169f28e0, af2c3834c8ca7cc65d15592ac671933df8848115 to before 88cf63c2599761c48dec8f618d57dccf8f6f4b53, af2c3834c8ca7cc65d15592ac671933df8848115 to before 9db6a78bc5e418e0064e2248c8f3b9b9e8418646, af2c3834c8ca7cc65d15592ac671933df8848115 to before 37cc0ac889b018097c217c5929fd6dc2aed636a1, af2c3834c8ca7cc65d15592ac671933df8848115 to before f54be97bc69b1096198b6717c150dec69f2a1b4d, af2c3834c8ca7cc65d15592ac671933df8848115 to before 639eb587f977c02423f4762467055b23902b4131, af2c3834c8ca7cc65d15592ac671933df8848115 to before e796028b4835af00d9a38ebbb208ec3a6634702a, af2c3834c8ca7cc65d15592ac671933df8848115 to before 3200144a2fa4209dc084a19941b9b203b43580f0
Linux

Linux · 4.13
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: drivers/media/platform/qcom/venus/core.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39710

Affected technology

linux kernel · from 4.13 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.44 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.4 (exclusive)
linux

debian linux · 11.0
debian

Linux · d96d3f30c0f2f564f6922bf4ccdf4464992e31fb to before 0520c89f6280d2b60ab537d5743601185ee7d8ab, d96d3f30c0f2f564f6922bf4ccdf4464992e31fb to before f5b7a943055a4a106d40a03bacd940e28cc1955f, d96d3f30c0f2f564f6922bf4ccdf4464992e31fb to before ef09b96665f16f3f0bac4e111160e6f24f1f8791, d96d3f30c0f2f564f6922bf4ccdf4464992e31fb to before 7638bae4539dcebc3f68fda74ac35d73618ec440, d96d3f30c0f2f564f6922bf4ccdf4464992e31fb to before ba567c2e52fbcf0e20502746bdaa79e911c2e8cf, d96d3f30c0f2f564f6922bf4ccdf4464992e31fb to before 2d8cea8310a245730816a1fd0c9fa4a5a3bdc68c, d96d3f30c0f2f564f6922bf4ccdf4464992e31fb to before f0cbd9386f974d310a0d20a02e4a1323e95ea654, d96d3f30c0f2f564f6922bf4ccdf4464992e31fb to before 49befc830daa743e051a65468c05c2ff9e8580e6
Linux

Linux · 4.13
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: drivers/media/platform/qcom/venus/hfi_venus.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39713

Affected technology

linux kernel · from 4.12 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.44 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.4 (exclusive)
linux

debian linux · 11.0
debian

Linux · 0f314f6c2e77beb1a232be21dd6be4e1849ba5ac to before 2964dbe631fd21ad7873b1752b895548d3c12496, 0f314f6c2e77beb1a232be21dd6be4e1849ba5ac to before 6aaef1a75985865d8c6c5b65fb54152060faba48, 0f314f6c2e77beb1a232be21dd6be4e1849ba5ac to before fbc81e78d75bf28972bc22b1599559557b1a1b83, 0f314f6c2e77beb1a232be21dd6be4e1849ba5ac to before 3c3e33b7edca7a2d6a96801f287f9faeb684d655, 0f314f6c2e77beb1a232be21dd6be4e1849ba5ac to before 1c2769dc80255824542ea5a4ff1a07dcdeb1603f, 0f314f6c2e77beb1a232be21dd6be4e1849ba5ac to before ed905fe7cba03cf22ae0b84cf1b73cd1c070423a, 0f314f6c2e77beb1a232be21dd6be4e1849ba5ac to before ff9dd3db6cd4c6b54a2ecbc58151bea4ec63bc59, 0f314f6c2e77beb1a232be21dd6be4e1849ba5ac to before 7af160aea26c7dc9e6734d19306128cce156ec40
Linux

Linux · 4.12
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: drivers/media/cec/usb/rainshadow/rainshadow-cec.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39714

Affected technology

linux kernel · from 3.14 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.44 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.4 (exclusive)
linux

debian linux · 11.0
debian

Linux · 0e0fe3958fdd13dbf55c3a787acafde6efd04272 to before c35e7c7a004ef379a1ae7c7486d4829419acad1d, 0e0fe3958fdd13dbf55c3a787acafde6efd04272 to before ee7bade8b9244834229b12b6e1e724939bedd484, 0e0fe3958fdd13dbf55c3a787acafde6efd04272 to before 5427dda195d6baf23028196fd55a0c90f66ffa61, 0e0fe3958fdd13dbf55c3a787acafde6efd04272 to before ef9b3c22405192afaa279077ddd45a51db90b83d, 0e0fe3958fdd13dbf55c3a787acafde6efd04272 to before 3d83d0b5ae5045a7a246ed116b5f6c688a12f9e9, 0e0fe3958fdd13dbf55c3a787acafde6efd04272 to before c3d75524e10021aa5c223d94da4996640aed46c0, 0e0fe3958fdd13dbf55c3a787acafde6efd04272 to before 9f886d21e235c4bd038cb20f6696084304197ab3, 0e0fe3958fdd13dbf55c3a787acafde6efd04272 to before 7e40e0bb778907b2441bff68d73c3eb6b6cd319f
Linux

Linux · 3.14
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: drivers/media/usb/usbtv/usbtv-video.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39724

Affected technology

linux kernel · from 3.10.48 (inclusive), before 3.11 (exclusive)
linux

linux kernel · from 3.12.24 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.44 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.4 (exclusive)
linux

debian linux · 11.0
debian

Linux · c49436b657d0a56a6ad90d14a7c3041add7cf64d to before 0b882f00655afefbc7729c6b5aec86f7a5473a3d, c49436b657d0a56a6ad90d14a7c3041add7cf64d to before b8ca8e3f75ede308b4d49a6ca5081460be01bdb5, c49436b657d0a56a6ad90d14a7c3041add7cf64d to before 68c4613e89f000e8198f9ace643082c697921c9f, c49436b657d0a56a6ad90d14a7c3041add7cf64d to before c826943abf473a3f7260fbadfad65e44db475460, c49436b657d0a56a6ad90d14a7c3041add7cf64d to before cb7b3633ed749db8e56f475f43c960652cbd6882, c49436b657d0a56a6ad90d14a7c3041add7cf64d to before 8e2739478c164147d0774802008528d9e03fb802, c49436b657d0a56a6ad90d14a7c3041add7cf64d to before 38c0ea484dedb58cb3a4391229933e16be0d1031, c49436b657d0a56a6ad90d14a7c3041add7cf64d to before 7f8fdd4dbffc05982b96caf586f77a014b2a9353, 6d5e79331417886196cb3a733bdb6645ba85bc42, 2401577586898b3590db80f8b97a26f81f0f6d4e, 3.10.48 to before 3.11, 3.12.24 to before 3.13
Linux

Linux · 3.13
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

Component: Not specified by the source
Function: enables
File: drivers/tty/serial/8250/8250_port.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39730

Affected technology

linux kernel · from 4.13 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.148 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.102 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.42 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.10 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.1 (exclusive)
linux

debian linux · 11.0
debian

Linux · 20fa19027286983ab2734b5910c4a687436e0c31 to before 7f8eca87fef7519e9c41f3258f25ebc2752247ee, 20fa19027286983ab2734b5910c4a687436e0c31 to before cb09afa0948d96b1e385d609ed044bb1aa043536, 20fa19027286983ab2734b5910c4a687436e0c31 to before 3570ef5c31314c13274c935a20b91768ab5bf412, 20fa19027286983ab2734b5910c4a687436e0c31 to before 763810bb883cb4de412a72f338d80947d97df67b, 20fa19027286983ab2734b5910c4a687436e0c31 to before 12ad3def2e5e0b120e3d0cb6ce8b7b796819ad40, 20fa19027286983ab2734b5910c4a687436e0c31 to before 2ad40b7992aa26bc631afc1a995b0e3ddc30de3f, 20fa19027286983ab2734b5910c4a687436e0c31 to before b7f7866932466332a2528fda099000b035303485, 20fa19027286983ab2734b5910c4a687436e0c31 to before 7dd36f7477d1e03a1fcf8d13531ca326c4fb599f, 20fa19027286983ab2734b5910c4a687436e0c31 to before ef93a685e01a281b5e2a25ce4e3428cf9371a205
Linux

Linux · 4.13
Linux

Component: Not specified by the source
Function: needs
File: fs/nfs/export.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39734

Affected technology

linux kernel · from 5.15.165 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 6.1.103 (inclusive), before 6.1.148 (exclusive)
linux

linux kernel · from 6.6.44 (inclusive), before 6.6.102 (exclusive)
linux

linux kernel · from 6.10.3 (inclusive), before 6.12.42 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.10 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.1 (exclusive)
linux

debian linux · 11.0
debian

Linux · e3e3b3eb54feaf6400800812c8d0f95a7213923d to before bec8109f957a6e193e52d1728799994c8005ca83, 7a498fc945080bccc25fdc36f1d663798441158b to before 1903a6c1f2818154f6bc87bceaaecafa92b6ac5c, 53173e3865acb06f3e86c703696510c12fecc612 to before a936be9b5f51c4d23f66fb673e9068c6b08104a4, 69505fe98f198ee813898cbcaf6770949636430b to before b356ee013a79e7e3147bfe065de376706c5d2ee9, 69505fe98f198ee813898cbcaf6770949636430b to before 7ce6f83ca9d52c9245b7a017466fc4baa1241b0b, 69505fe98f198ee813898cbcaf6770949636430b to before bd20733746263acaaf2a21881665db27ee4303d5, 69505fe98f198ee813898cbcaf6770949636430b to before a49f0abd8959048af18c6c690b065eb0d65b2d21, d5ad80aabd5a76a5de52b7663b1f3223dd01ea38, 5.15.165 to before 5.15.190, 6.1.103 to before 6.1.148, 6.6.44 to before 6.6.102, 6.10.3 to before 6.11
Linux

Linux · 6.11
Linux

Component: Not specified by the source
File: fs/ntfs3/file.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39736

Affected technology

linux kernel · from 5.4 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

debian linux · 11.0
debian

Linux · c5665868183fec689dbab9fb8505188b2c4f0757 to before c7b6ea0ede687e7460e593c5ea478f50aa41682a, c5665868183fec689dbab9fb8505188b2c4f0757 to before 4b0151e1d468eb2667c37b7af99b3c075072d334, c5665868183fec689dbab9fb8505188b2c4f0757 to before f249d32bb54876b4b6c3ae071af8ddca77af390b, c5665868183fec689dbab9fb8505188b2c4f0757 to before 62879faa8efe8d8a9c7bf7606ee9c068012d7dac, c5665868183fec689dbab9fb8505188b2c4f0757 to before 1da95d3d4b7b1d380ebd87b71a61e7e6aed3265d, c5665868183fec689dbab9fb8505188b2c4f0757 to before a0854de00ce2ee27edf39037e7836ad580eb3350, c5665868183fec689dbab9fb8505188b2c4f0757 to before 08f70be5e406ce47c822f2dd11c1170ca259605b, c5665868183fec689dbab9fb8505188b2c4f0757 to before a181b228b37a6a5625dad2bb4265bb7abb673e9f, c5665868183fec689dbab9fb8505188b2c4f0757 to before 47b0f6d8f0d2be4d311a49e13d2fd5f152f492b2
Linux

Linux · 5.4
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: mm/kmemleak.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39737

Affected technology

linux kernel · from 5.4.1 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

linux kernel · 5.4
linux

linux kernel · 5.4 · update rc4
linux

linux kernel · 5.4 · update rc5
linux

linux kernel · 5.4 · update rc6
linux

linux kernel · 5.4 · update rc7
linux

linux kernel · 5.4 · update rc8
linux

linux kernel · 6.17 · update rc1
linux

debian linux · 11.0
debian

Linux · 2abd839aa7e615f2bbc50c8ba7deb9e40d186768 to before 9f1f4e95031f84867c5821540466d62f88dab8ca, 2abd839aa7e615f2bbc50c8ba7deb9e40d186768 to before 1ef72a7fedc5bca70e8cc980985790de10d407aa, 2abd839aa7e615f2bbc50c8ba7deb9e40d186768 to before a04de4c40aab9b338dfa989cf4aec70fd187eeb2, 2abd839aa7e615f2bbc50c8ba7deb9e40d186768 to before f014c10d190b92aad366e56b445daffcd1c075e4, 2abd839aa7e615f2bbc50c8ba7deb9e40d186768 to before e21a3ddd58733ce31afcb1e5dc3cb80a4b5bc29b, 2abd839aa7e615f2bbc50c8ba7deb9e40d186768 to before 8d2d22a55ffe35c38e69795468a7addd1a80e9ce, 2abd839aa7e615f2bbc50c8ba7deb9e40d186768 to before 926092268efdf1ed7b55cf486356c74a9e7710d1, 2abd839aa7e615f2bbc50c8ba7deb9e40d186768 to before 9b80430c194e4a114dc663c1025d56b4f3d0153d, 2abd839aa7e615f2bbc50c8ba7deb9e40d186768 to before d1534ae23c2b6be350c8ab060803fbf6e9682adc
Linux

Linux · 5.4
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: mm/kmemleak.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39738

Affected technology

linux kernel · from 5.11.1 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

linux kernel · 5.11
linux

linux kernel · 5.11 · update rc3
linux

linux kernel · 5.11 · update rc4
linux

linux kernel · 5.11 · update rc5
linux

linux kernel · 5.11 · update rc6
linux

linux kernel · 5.11 · update rc7
linux

linux kernel · 6.17 · update rc1
linux

debian linux · 11.0
debian

Linux · 638331fa56caeaa8b4d31cc1dfbe0ce989bcff67 to before fa086b1398cf7e5f7dee7241bd5f2855cb5df8dc, 638331fa56caeaa8b4d31cc1dfbe0ce989bcff67 to before fcb1f77b8ed8795608ca7a1f6505e2b07236c1f3, 638331fa56caeaa8b4d31cc1dfbe0ce989bcff67 to before f83d4c81bda3b7d1813268ab77408f7a0ce691ff, 638331fa56caeaa8b4d31cc1dfbe0ce989bcff67 to before 39a93e1c9dbf7e11632efeb20fcf0fc1dcf64d51, 638331fa56caeaa8b4d31cc1dfbe0ce989bcff67 to before 125e94a4b76b7b75d194f85bedd628097d2121f0, 638331fa56caeaa8b4d31cc1dfbe0ce989bcff67 to before 4e403bd8e127d40dc7c05f06ee969c1ba1537ec5, 638331fa56caeaa8b4d31cc1dfbe0ce989bcff67 to before 4289b494ac553e74e86fed1c66b2bf9530bc1082
Linux

Linux · 5.11
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: fs/btrfs/relocation.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.3/10) rates confidentiality impact as low; integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39742

Affected technology

linux kernel · from 4.8 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

debian linux · 11.0
debian

Linux · b094a36f90975373c3a241839869217a65f17d81 to before 9bba1a9994c523b44db64f63b564b4719ea2b7ef, b094a36f90975373c3a241839869217a65f17d81 to before 1a7cf828ed861de5be1aff99e10f114b363c19d3, b094a36f90975373c3a241839869217a65f17d81 to before 9d3211cb61a0773a2440d0a0698c1e6e7429f907, b094a36f90975373c3a241839869217a65f17d81 to before 4b4317b0d758ff92ba96f4e448a8992a6fe607bf, b094a36f90975373c3a241839869217a65f17d81 to before 89fdac333a17ed990b41565630ef4791782e02f5, b094a36f90975373c3a241839869217a65f17d81 to before 9b05e91afe948ed819bf87d7ba0fccf451ed79a6, b094a36f90975373c3a241839869217a65f17d81 to before 31d0599a23efdbfe579bfbd1eb8f8c942f13744d, b094a36f90975373c3a241839869217a65f17d81 to before ac53f377393cc85156afdc90b636e84e544a6f96, b094a36f90975373c3a241839869217a65f17d81 to before 59f7d2138591ef8f0e4e4ab5f1ab674e8181ad3a
Linux

Linux · 4.8
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
Function: divides
File: drivers/infiniband/hw/hfi1/affinity.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39743

Affected technology

linux kernel · from 2.6.14 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

debian linux · 11.0
debian

Linux · 32983696a48a6c41d99f3eca82ba7510a552d843 to before 89fff8e3d6710fc32507b8e19eb5afa9fb79b896, 32983696a48a6c41d99f3eca82ba7510a552d843 to before 5845b926c561b8333cd65169526eec357d7bb449, 32983696a48a6c41d99f3eca82ba7510a552d843 to before 8ed7275910fb7177012619864e04d3008763f3ea, 32983696a48a6c41d99f3eca82ba7510a552d843 to before b5b471820c33365a8ccd2d463578bf4e47056c2c, 32983696a48a6c41d99f3eca82ba7510a552d843 to before 34d8e982bac48bdcca7524644a8825a580edce74, 32983696a48a6c41d99f3eca82ba7510a552d843 to before df3fd8daf278eca365f221749ae5b728e8382a04, 32983696a48a6c41d99f3eca82ba7510a552d843 to before 2b1d5ca395a5fb170c3f885cd42c16179f7f54ec, 32983696a48a6c41d99f3eca82ba7510a552d843 to before 1bb5cdc3e39f0c2b311fcb631258b7e60d3fb0d3, 32983696a48a6c41d99f3eca82ba7510a552d843 to before 2d91b3765cd05016335cd5df5e5c6a29708ec058
Linux

Linux · 2.6.14
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: fs/jfs/inode.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39749

Affected technology

linux kernel · from 5.3 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

debian linux · 11.0
debian

Linux · 0864f057b050bc6dd68106b3185e02db5140012d to before 74f58f382a7c8333f8d09701aefaa25913bdbe0e, 0864f057b050bc6dd68106b3185e02db5140012d to before f937759c7432d6151b73e1393b6517661813d506, 0864f057b050bc6dd68106b3185e02db5140012d to before 0ad84d62217488e679ecc90e8628980dcc003de3, 0864f057b050bc6dd68106b3185e02db5140012d to before b5de8d80b5d049f051b95d9b1ee50ae4ab656124, 0864f057b050bc6dd68106b3185e02db5140012d to before b55947b725f190396f475d5d0c59aa855a4d8895, 0864f057b050bc6dd68106b3185e02db5140012d to before e35e711c78c8a4c43330c0dcb1c4d507a19c20f4, 0864f057b050bc6dd68106b3185e02db5140012d to before 90de9c94ea72327cfa9c2c9f6113c23a513af60b, 0864f057b050bc6dd68106b3185e02db5140012d to before 55e11f6776798b27cf09a7aa0d718415d4fc9cf5, 0864f057b050bc6dd68106b3185e02db5140012d to before 90c09d57caeca94e6f3f87c49e96a91edd40cbfd
Linux

Linux · 5.3
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: kernel/rcu/tree_plugin.h

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39752

Affected technology

linux kernel · from 3.19 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

debian linux · 11.0
debian

Linux · 3ee851e212d0bb6be8c462059fba74ce2e3f6064 to before 3c6bf7a324b8995b9c7d790c8d2abf0668f51551, 3ee851e212d0bb6be8c462059fba74ce2e3f6064 to before 888a453c2a239765a7ab4de8a3cedae2e3802528, 3ee851e212d0bb6be8c462059fba74ce2e3f6064 to before c0726d1e466e2d0da620836e293a59e6427ccdff, 3ee851e212d0bb6be8c462059fba74ce2e3f6064 to before 265583266d93db4ff83d088819b1f63fdf0131db, 3ee851e212d0bb6be8c462059fba74ce2e3f6064 to before d7d6d076ee9532c4668f14696a35688d35dd16f4, 3ee851e212d0bb6be8c462059fba74ce2e3f6064 to before 0223a3683d502b7e5eb2eb4ad7e97363fa88d531, 3ee851e212d0bb6be8c462059fba74ce2e3f6064 to before 47769dab9073a73e127aa0bfd0ba4c51eaccdc33, 3ee851e212d0bb6be8c462059fba74ce2e3f6064 to before 1eb67589a7e091b1e5108aab72fddbf4dc69af2c, 3ee851e212d0bb6be8c462059fba74ce2e3f6064 to before 7cdb433bb44cdc87dc5260cdf15bf03cc1cd1814
Linux

Linux · 3.19
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: arch/arm/mach-rockchip/platsmp.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39756

Affected technology

linux kernel · from 2.6.25 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

debian linux · 11.0
debian

Linux · 9cfe015aa424b3c003baba3841a60dd9b5ad319b to before b4159c5a90c03f8acd3de345a7f5fc63b0909818, 9cfe015aa424b3c003baba3841a60dd9b5ad319b to before f95638a8f22eba307dceddf5aef9ae2326bbcf98, 9cfe015aa424b3c003baba3841a60dd9b5ad319b to before 749528086620f8012b83ae032a80f6ffa80c45cd, 9cfe015aa424b3c003baba3841a60dd9b5ad319b to before 628fc28f42d979f36dbf75a6129ac7730e30c04e, 9cfe015aa424b3c003baba3841a60dd9b5ad319b to before 237e416eb62101f21b28c9e6e564d10efe1ecc6f, 9cfe015aa424b3c003baba3841a60dd9b5ad319b to before d4f9351243c17865a8cdbe6b3ccd09d0b13a7bcc, 9cfe015aa424b3c003baba3841a60dd9b5ad319b to before 9f61fa6a2a89a610120bc4e5d24379c667314b5c, 9cfe015aa424b3c003baba3841a60dd9b5ad319b to before dfd1f4ea98c3bd3a03d12169b5b2daa1f0a3e4ae, 9cfe015aa424b3c003baba3841a60dd9b5ad319b to before 04a2c4b4511d186b0fce685da21085a5d4acd370
Linux

Linux · 2.6.25
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: fs/file.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39757

Affected technology

linux kernel · from 4.19 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

debian linux · 11.0
debian

Linux · 11785ef53228d23ec386f5fe4a34601536f0c891 to before 799c06ad4c9c790c265e8b6b94947213f1fb389c, 11785ef53228d23ec386f5fe4a34601536f0c891 to before 786571b10b1ae6d90e1242848ce78ee7e1d493c4, 11785ef53228d23ec386f5fe4a34601536f0c891 to before 275e37532e8ebe25e8a4069b2d9f955bfd202a46, 11785ef53228d23ec386f5fe4a34601536f0c891 to before 47ab3d820cb0a502bd0074f83bb3cf7ab5d79902, 11785ef53228d23ec386f5fe4a34601536f0c891 to before 1034719fdefd26caeec0a44a868bb5a412c2c1a5, 11785ef53228d23ec386f5fe4a34601536f0c891 to before ae17b3b5e753efc239421d186cd1ff06e5ac296e, 11785ef53228d23ec386f5fe4a34601536f0c891 to before dfdcbcde5c20df878178245d4449feada7d5b201, 11785ef53228d23ec386f5fe4a34601536f0c891 to before 7ef3fd250f84494fb2f7871f357808edaa1fc6ce, 11785ef53228d23ec386f5fe4a34601536f0c891 to before ecfd41166b72b67d3bdeb88d224ff445f6163869
Linux

Linux · 4.19
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: sound/usb/stream.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39760

Affected technology

linux kernel · from 2.6.35 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

debian linux · 11.0
debian

Linux · 842f16905dfc6743c1dd80c3d29b49ba3ab7f7c8 to before 5c3097ede7835d3caf6543eb70ff689af4550cd2, 842f16905dfc6743c1dd80c3d29b49ba3ab7f7c8 to before 058ad2b722812708fe90567875704ae36563e33b, 842f16905dfc6743c1dd80c3d29b49ba3ab7f7c8 to before b10e0f868067c6f25bbfabdcf3e1e6432c24ca55, 842f16905dfc6743c1dd80c3d29b49ba3ab7f7c8 to before 5badd56c711e2c8371d1670f9bd486697575423c, 842f16905dfc6743c1dd80c3d29b49ba3ab7f7c8 to before 9512510cee7d1becdb0e9413fdd3ab783e4e30ee, 842f16905dfc6743c1dd80c3d29b49ba3ab7f7c8 to before 4fe6f472f0beef4281e6f03bc38a910a33be663f, 842f16905dfc6743c1dd80c3d29b49ba3ab7f7c8 to before 9843bcb187cb933861f7805022e6873905f669e4, 842f16905dfc6743c1dd80c3d29b49ba3ab7f7c8 to before cf16f408364efd8a68f39011a3b073c83a03612d
Linux

Linux · 2.6.35
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: drivers/usb/core/config.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39766

Affected technology

linux kernel · from 4.19 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.44 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.4 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

debian linux · 11.0
debian

Linux · 046f6fd5daefac7f5abdafb436b30f63bc7c602b to before 7689ab22de36f8db19095f6bdf11f28cfde92f5c, 046f6fd5daefac7f5abdafb436b30f63bc7c602b to before de04ddd2980b48caa8d7e24a7db2742917a8b280, 046f6fd5daefac7f5abdafb436b30f63bc7c602b to before 0dacfc5372e314d1219f03e64dde3ab495a5a25e, 046f6fd5daefac7f5abdafb436b30f63bc7c602b to before 710866fc0a64eafcb8bacd91bcb1329eb7e5035f, 046f6fd5daefac7f5abdafb436b30f63bc7c602b to before aa12ee1c1bd260943fd6ab556d8635811c332eeb, 046f6fd5daefac7f5abdafb436b30f63bc7c602b to before ff57186b2cc39766672c4c0332323933e5faaa88, 046f6fd5daefac7f5abdafb436b30f63bc7c602b to before 62d591dde4defb1333d202410609c4ddeae060b3, 046f6fd5daefac7f5abdafb436b30f63bc7c602b to before 15de71d06a400f7fdc15bf377a2552b0ec437cf5
Linux

Linux · 4.19
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: net/sched/sch_cake.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39772

Affected technology

linux kernel · from 4.14 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.44 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.4 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

debian linux · 11.0
debian

Linux · b3df5e65cc03696b0624a877d03a3ddf3ef43f52 to before ddf1691f25345699296e642f0f59f2d464722fa3, b3df5e65cc03696b0624a877d03a3ddf3ef43f52 to before c950e1be3a24d021475b56efdb49daa7fbba63a9, b3df5e65cc03696b0624a877d03a3ddf3ef43f52 to before f93032e5d68f459601c701f6ab087b5feb3382e8, b3df5e65cc03696b0624a877d03a3ddf3ef43f52 to before a4f1b9c57092c48bdc7958abd23403ccaed437b2, b3df5e65cc03696b0624a877d03a3ddf3ef43f52 to before d3e774266c28aefab3e9db334fdf568f936cae04, b3df5e65cc03696b0624a877d03a3ddf3ef43f52 to before 93a08f856fcc5aaeeecad01f71bef3088588216a
Linux

Linux · 4.14
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_drv.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39773

Affected technology

linux kernel · from 2.6.34 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.44 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.4 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

debian linux · 11.0
debian

Linux · d902eee43f1951b358d7347d9165c6af21cf7b1b to before 34171b9e53bd1dc264f5556579f2b04f04435c73, d902eee43f1951b358d7347d9165c6af21cf7b1b to before 43e281fde5e76a866a4d10780c35023f16c0e432, d902eee43f1951b358d7347d9165c6af21cf7b1b to before 96476b043efb86a94f2badd260f7f99c97bd5893, d902eee43f1951b358d7347d9165c6af21cf7b1b to before bdb19cd0de739870bb3494c815138b9dc30875c4, d902eee43f1951b358d7347d9165c6af21cf7b1b to before 5bf5fce8a0c2a70d063af778fdb5b27238174cdd, d902eee43f1951b358d7347d9165c6af21cf7b1b to before d1547bf460baec718b3398365f8de33d25c5f36f
Linux

Linux · 2.6.34
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/bridge/br_multicast.c, net/bridge/br_private.h

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39776

Affected technology

linux kernel · from 5.15 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.44 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.4 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

debian linux · 11.0
debian

Linux · 3c9b84f044a9e54cf56d1b2c9b80a2d2ce56d70a to before 7bf57a0709cd7c9088cea8de023d6f4fbf2518b0, 3c9b84f044a9e54cf56d1b2c9b80a2d2ce56d70a to before 47d2a149611b8a94d24add9868c442a4af278658, 3c9b84f044a9e54cf56d1b2c9b80a2d2ce56d70a to before 63962ff932ef359925b94be2a88df6b4fd4fed0a, 3c9b84f044a9e54cf56d1b2c9b80a2d2ce56d70a to before 61a9f2e5c49f05e3ea2c16674540a075a1b4be6f, 3c9b84f044a9e54cf56d1b2c9b80a2d2ce56d70a to before 561171db3b3eb759ba3f284dba7a76f4476ade03, 3c9b84f044a9e54cf56d1b2c9b80a2d2ce56d70a to before dde30854bddfb5d69f30022b53c5955a41088b33
Linux

Linux · 5.15
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: mm/debug_vm_pgtable.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39782

Affected technology

linux kernel · from 2.6.16 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.44 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.4 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

debian linux · 11.0
debian

Linux · f93ea411b73594f7d144855fd34278bcf34a9afc to before f683d611518d30334813eecf9a8c687453e2800e, f93ea411b73594f7d144855fd34278bcf34a9afc to before f7ee8fd689e6d534f9fd2494b9266f7998082e65, f93ea411b73594f7d144855fd34278bcf34a9afc to before 84ff98c1ea19acd3f9389e4bb6061364e943f85e, f93ea411b73594f7d144855fd34278bcf34a9afc to before 26cb9aad94cb1811d8fae115594cc71fa3d91ab0, f93ea411b73594f7d144855fd34278bcf34a9afc to before 41f40038de62e8306897cf6840791b268996432a, f93ea411b73594f7d144855fd34278bcf34a9afc to before 429d50cbaff45090d52a1ea850d5de8c14881ee7, f93ea411b73594f7d144855fd34278bcf34a9afc to before 3faac5e1d14c63260fd1bf789d96bde3ab3d9e54, f93ea411b73594f7d144855fd34278bcf34a9afc to before 9d98cf4632258720f18265a058e62fde120c0151
Linux

Linux · 2.6.16
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: fs/jbd2/checkpoint.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39783

Affected technology

linux kernel · from 4.18 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.44 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.4 (exclusive)
linux

debian linux · 11.0
debian

Linux · ef1433f717a2c63747a519d86965d73ff9bd08b3 to before 80ea6e6904fb2ba4ccb5d909579988466ec65358, ef1433f717a2c63747a519d86965d73ff9bd08b3 to before d5aecddc3452371d9da82cdbb0c715812524b54b, ef1433f717a2c63747a519d86965d73ff9bd08b3 to before dc4ffbd571716ff3b171418fb03abe80e720a7b1, ef1433f717a2c63747a519d86965d73ff9bd08b3 to before 409af8b9f7b4f23cd0464e71c6cd6fe13c076ae2, ef1433f717a2c63747a519d86965d73ff9bd08b3 to before 0758862386f114d9ab1e23181461bd1e2e9ec4c6, ef1433f717a2c63747a519d86965d73ff9bd08b3 to before 6cf65505523224cab1449d726d2ce8180c2941ee, ef1433f717a2c63747a519d86965d73ff9bd08b3 to before a302bd89db35d8b7e279de4d2b41c16c7f191069, ef1433f717a2c63747a519d86965d73ff9bd08b3 to before d79123d79a8154b4318529b7b2ff7e15806f480b
Linux

Linux · 4.18
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

Component: Not specified by the source
File: drivers/pci/endpoint/pci-epf-core.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39787

Affected technology

linux kernel · from 4.11 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.44 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.4 (exclusive)
linux

debian linux · 11.0
debian

Linux · 2aad40d911eeb7dcac91c669f2762a28134f0eb1 to before 1096eb63ecfc8df90b70cd068e6de0c2ff204dfd, 2aad40d911eeb7dcac91c669f2762a28134f0eb1 to before e1720eb32acf411c328af6a8c8f556c94535808e, 2aad40d911eeb7dcac91c669f2762a28134f0eb1 to before 0d59ce2bfc3bb13abe6240335a1bf7b96536d022, 2aad40d911eeb7dcac91c669f2762a28134f0eb1 to before 43d26997d88c4056fce0324e72f62556bc7e8e8d, 2aad40d911eeb7dcac91c669f2762a28134f0eb1 to before 981c845f29838e468a9bfa87f784307193a31297, 2aad40d911eeb7dcac91c669f2762a28134f0eb1 to before 87bfabb3b2f46827639173f143aa43f7cfc0a7e6, 2aad40d911eeb7dcac91c669f2762a28134f0eb1 to before 81278be4eb5f08ba2c68c3055893e61cc03727fe, 2aad40d911eeb7dcac91c669f2762a28134f0eb1 to before 9f9967fed9d066ed3dae9372b45ffa4f6fccfeef
Linux

Linux · 4.11
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

Component: Not specified by the source
File: drivers/soc/qcom/mdt_loader.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39788

Affected technology

linux kernel · from 5.9 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.44 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.4 (exclusive)
linux

debian linux · 11.0
debian

Linux · 55f4b1f73631a0817717fe6e98517de51b4c3527 to before 01510a9e8222f11cce064410f3c2fcf0756c0a08, 55f4b1f73631a0817717fe6e98517de51b4c3527 to before 098b2c8ee208c77126839047b9e6e1925bb35baa, 55f4b1f73631a0817717fe6e98517de51b4c3527 to before c1f025da8f370a015e412b55cbcc583f91de8316, 55f4b1f73631a0817717fe6e98517de51b4c3527 to before 6d53b2a134da77eb7fe65c5c7c7a3c193539a78a, 55f4b1f73631a0817717fe6e98517de51b4c3527 to before dc8fb963742f1a38d284946638f9358bdaa0ddee, 55f4b1f73631a0817717fe6e98517de51b4c3527 to before 5b9f1ef293428ea9c0871d96fcec2a87c4445832, 55f4b1f73631a0817717fe6e98517de51b4c3527 to before 01aad16c2257ab8ff33b152b972c9f2e1af47912
Linux

Linux · 5.9
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: drivers/ufs/host/ufs-exynos.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39790

Affected technology

linux kernel · from 5.7 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.44 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.4 (exclusive)
linux

debian linux · 11.0
debian

Linux · 1d3173a3bae7039b765a0956e3e4bf846dbaacb8 to before 7b3f0e3b60c27f4fcb69927d84987e5fd6240530, 1d3173a3bae7039b765a0956e3e4bf846dbaacb8 to before 4079c6c59705b96285219b9efc63cab870d757b7, 1d3173a3bae7039b765a0956e3e4bf846dbaacb8 to before 5e17429679a8545afe438ce7a82a13a54e8ceabb, 1d3173a3bae7039b765a0956e3e4bf846dbaacb8 to before 2ec99b922f4661521927eeada76f431eebfbabc4, 1d3173a3bae7039b765a0956e3e4bf846dbaacb8 to before 44e1a079e18f78d6594a715b0c6d7e18c656f7b9, 1d3173a3bae7039b765a0956e3e4bf846dbaacb8 to before 5bd398e20f0833ae8a1267d4f343591a2dd20185
Linux

Linux · 5.7
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: drivers/bus/mhi/host/main.c

Attack conditions (Source advisory, CVSS 3.1): Local · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.4/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39794

Affected technology

linux kernel · from 3.4 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

debian linux · 11.0
debian

Linux · b36ab9754efbd7429d214b3b03dc9843882571bd to before b28c1a14accc79ead1e87bbdae53309da60be1e7, b36ab9754efbd7429d214b3b03dc9843882571bd to before 75a3bdfeed2f129a2c7d9fd7779382b78e35b014, b36ab9754efbd7429d214b3b03dc9843882571bd to before 2499b0ac908eefbb8a217aae609b7a5b5174f330, b36ab9754efbd7429d214b3b03dc9843882571bd to before 387435f4833f97aabfd74434ee526e31e8a626ea, b36ab9754efbd7429d214b3b03dc9843882571bd to before 46b3a7a3a36d5833f14914d1b95c69d28c6a76d6, b36ab9754efbd7429d214b3b03dc9843882571bd to before 9b0b3b5e5cae95e09bf0ae4a9bcb58d9b6d57f87, b36ab9754efbd7429d214b3b03dc9843882571bd to before 96d6605bf0561d6e568b1dd9265a0f73b5b94f51, b36ab9754efbd7429d214b3b03dc9843882571bd to before 30ef45b89a5961cdecf907ecff1ef3374d1de510, b36ab9754efbd7429d214b3b03dc9843882571bd to before 398e67e0f5ae04b29bcc9cbf342e339fe9d3f6f1
Linux

Linux · 3.4
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: arch/arm/mach-tegra/reset.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39795

Affected technology

linux kernel · from 5.10 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

debian linux · 11.0
debian

Linux · 22ada802ede89829dd010a317d9b812b7df7111a to before 418751910044649baa2b424ea31cce3fc4dcc253, 22ada802ede89829dd010a317d9b812b7df7111a to before 8b3ce085b52e674290cbfdd07034e7653ffbe4dc, 22ada802ede89829dd010a317d9b812b7df7111a to before 31f2f080898e50cbf2bae62d35f9f2a997547b38, 22ada802ede89829dd010a317d9b812b7df7111a to before 3b9d69f0e68aa6b0acd9791c45d445154a8c66e9, 22ada802ede89829dd010a317d9b812b7df7111a to before 46aa80ef49594ed7de685ecbc673b291e9a2c159, 22ada802ede89829dd010a317d9b812b7df7111a to before 5e276e6ff9aacf8901b9c3265c3cdd2568c9fff2, 22ada802ede89829dd010a317d9b812b7df7111a to before 14beeef4aafecc8a41de534e31fb5be94739392f, 22ada802ede89829dd010a317d9b812b7df7111a to before 448dfecc7ff807822ecd47a5c052acedca7d09e8
Linux

Linux · 5.10
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: block/blk-settings.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39798

Affected technology

linux kernel · from 2.6.19 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

debian linux · 11.0
debian

Linux · 54ceac4515986030c2502960be620198dd8fe25b to before 95eb0d97ab98a10e966125c1f274e7d0fc0992b3, 54ceac4515986030c2502960be620198dd8fe25b to before 73fcb101bb3eb2a552d7856a476b2c0bc3b5ef9e, 54ceac4515986030c2502960be620198dd8fe25b to before 3924dab90816d0c683a110628ef386f83a9d1e13, 54ceac4515986030c2502960be620198dd8fe25b to before 175afda783e38c0660f2afc0602dd9c83d4e7ee1, 54ceac4515986030c2502960be620198dd8fe25b to before 987c20428f067c1c7f29ed0a2bd8c63fa74b1c2c, 54ceac4515986030c2502960be620198dd8fe25b to before 816a6f60c2c2b679a33fa4276442bafd11473651, 54ceac4515986030c2502960be620198dd8fe25b to before a8ffee4abd8ec9d7a64d394e0306ae64ba139fd2, 54ceac4515986030c2502960be620198dd8fe25b to before 50e0fd0050e510e749e1fdd1d7158e419ff8f3b9, 54ceac4515986030c2502960be620198dd8fe25b to before b01f21cacde9f2878492cf318fee61bf4ccad323
Linux

Linux · 2.6.19
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

Component: Not specified by the source
File: fs/nfs/client.c, fs/nfs/internal.h, fs/nfs/nfs4client.c, fs/nfs/nfs4proc.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.3/10) rates confidentiality, integrity and availability impact as low. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39801

Affected technology

linux kernel · from 3.2 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.44 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.4 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

debian linux · 11.0
debian

Linux · 72246da40f3719af3bfd104a2365b32537c27d83 to before dfe40159eec6ca63b40133bfa783eee2e3ed829f, 72246da40f3719af3bfd104a2365b32537c27d83 to before 5a1a847d841505dba2bd85602daf5c218e1d85b8, 72246da40f3719af3bfd104a2365b32537c27d83 to before 84c95dbf5bece56086cdb65a64162af35158bdd9, 72246da40f3719af3bfd104a2365b32537c27d83 to before f49697dfba2915a9ff36f94604eb76fa61413929, 72246da40f3719af3bfd104a2365b32537c27d83 to before db27482b9db340402e05d4e9b75352bbaca51af2, 72246da40f3719af3bfd104a2365b32537c27d83 to before 45eae113dccaf8e502090ecf5b3d9e9b805add6f
Linux

Linux · 3.2
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: drivers/usb/dwc3/ep0.c, drivers/usb/dwc3/gadget.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39806

Affected technology

linux kernel · from 5.15.168 (inclusive), before 5.15.191 (exclusive)
linux

linux kernel · from 6.1.111 (inclusive), before 6.1.150 (exclusive)
linux

linux kernel · from 6.6.52 (inclusive), before 6.6.104 (exclusive)
linux

linux kernel · from 6.10.11 (inclusive), before 6.11 (exclusive)
linux

linux kernel · from 6.11.1 (inclusive), before 6.12.45 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.5 (exclusive)
linux

linux kernel · 6.11
linux

linux kernel · 6.11 · update rc5
linux

linux kernel · 6.11 · update rc6
linux

linux kernel · 6.11 · update rc7
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

debian linux · 11.0
debian

Linux · 7d91a0b2151a9c3b61d44c85c8eba930eddd1dd0 to before 4263e5851779f7d8ebfbc9cc7d2e9b0217adba8d, 45ec9f17ce46417fc4eccecf388c99e81fb7fcc1 to before 7ab7311c43ae19c66c53ccd8c5052a9072a4e338, 1d5c7d0a49ec9d8786f266ac6d1d7c4960e1787b to before d4e6e2680807671e1c73cd6a986b33659ce92f2b, c8000deb68365b461b324d68c7ea89d730f0bb85 to before 3055309821dd3da92888f88bad10f0324c3c89fe, c8000deb68365b461b324d68c7ea89d730f0bb85 to before c13e95587583d018cfbcc277df7e02d41902ac5a, c8000deb68365b461b324d68c7ea89d730f0bb85 to before 0379eb8691b9c4477da0277ae0832036ca4410b4, d189e24a42b8bd0ece3d28801d751bf66dba8e92, 5.15.168 to before 5.15.191, 6.1.111 to before 6.1.150, 6.6.52 to before 6.6.104, 6.10.11 to before 6.11
Linux

Linux · 6.11
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: drivers/hid/hid-multitouch.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39808

Affected technology

linux kernel · from 2.6.37 (inclusive), before 5.4.298 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.242 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.191 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.150 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.104 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.45 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.5 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

debian linux · 11.0
debian

Linux · 0277873c05158c5efc97c23d52e6aec6250bde0f to before 22ddb5eca4af5e69dffe2b54551d2487424448f1, 0277873c05158c5efc97c23d52e6aec6250bde0f to before 019c34ca11372de891c06644846eb41fca7c890c, 0277873c05158c5efc97c23d52e6aec6250bde0f to before 4338b0f6544c3ff042bfbaf40bc9afe531fb08c7, 0277873c05158c5efc97c23d52e6aec6250bde0f to before 6070123d5344d0950f10ef6a5fdc3f076abb7ad2, 0277873c05158c5efc97c23d52e6aec6250bde0f to before e422370e6ab28478872b914cee5d49a9bdfae0c6, 0277873c05158c5efc97c23d52e6aec6250bde0f to before 98520a9a3d69a530dd1ee280cbe0abc232a35bff, 0277873c05158c5efc97c23d52e6aec6250bde0f to before 183def8e4d786e50165e5d992df6a3083e45e16c, 0277873c05158c5efc97c23d52e6aec6250bde0f to before 185c926283da67a72df20a63a5046b3b4631b7d9
Linux

Linux · 2.6.37
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: drivers/hid/hid-ntrig.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39812

Affected technology

linux kernel · from 2.6.12.1 (inclusive), before 5.4.298 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.242 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.191 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.150 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.104 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.45 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.5 (exclusive)
linux

linux kernel · 2.6.12
linux

linux kernel · 2.6.12 · update rc2
linux

linux kernel · 2.6.12 · update rc3
linux

linux kernel · 2.6.12 · update rc4
linux

linux kernel · 2.6.12 · update rc5
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

debian linux · 11.0
debian

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 45e4b36593edffb7bbee5828ae820bc10a9fa0f3, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 9546934c2054bba1bd605c44e936619159a34027, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 17d6c7747045e9b802c2f5dfaba260d309d831ae, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 65b4693d8bab5370cfcb44a275b4d8dcb06e56bf, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 463aa96fca6209bb205f49f7deea3817d7ddaa3a, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1bbc0c02aea1f1c405bd1271466889c25a1fe01b, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f6c2cc99fc2387ba6499facd6108f6543382792d, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2e8750469242cad8f01f320131fd5a6f540dbb99
Linux

Linux · 2.6.12
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: net/sctp/ipv6.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39813

Affected technology

linux kernel · from 2.6.28 (inclusive), before 5.4.298 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.242 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.191 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.150 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.104 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.45 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.5 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

debian linux · 11.0
debian

Linux · d769041f865330034131525ee6a7f72eb4af2a24 to before f299353e7ccbcc5c2ed8993c48fbe7609cbe729a, d769041f865330034131525ee6a7f72eb4af2a24 to before 5ab0ec206deb99eb3baf8f1d7602aeaa91dbcc85, d769041f865330034131525ee6a7f72eb4af2a24 to before a6f0f8873cc30fd4543b09adf03f7f51d293f0e6, d769041f865330034131525ee6a7f72eb4af2a24 to before e80ff23ba8bdb0f41a1afe2657078e4097d13a9a, d769041f865330034131525ee6a7f72eb4af2a24 to before 28c8fb7ae2ad27d81c8de3c4fe608c509f6a18aa, d769041f865330034131525ee6a7f72eb4af2a24 to before ced94e137e6cd5e79c65564841d3b7695d0f5fa3, d769041f865330034131525ee6a7f72eb4af2a24 to before fbd4cf7ee4db65ef36796769fe978e9eba6f0de4, d769041f865330034131525ee6a7f72eb4af2a24 to before 4013aef2ced9b756a410f50d12df9ebe6a883e4a
Linux

Linux · 2.6.28
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: kernel/trace/trace.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39817

Affected technology

linux kernel · from 3.8.2 (inclusive), before 5.4.298 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.242 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.191 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.150 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.104 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.45 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.5 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

debian linux · 11.0
debian

Linux · da27a24383b2b10bf6ebd0db29b325548aafecb4 to before 0f63fbabeaaaaaaf5b742a2f4c1b4590d50bf1f6, da27a24383b2b10bf6ebd0db29b325548aafecb4 to before 794399019301944fd6d2e0d7a51b3327e26c410e, da27a24383b2b10bf6ebd0db29b325548aafecb4 to before 568e7761279b99c6daa3002290fd6d8047ddb6d2, da27a24383b2b10bf6ebd0db29b325548aafecb4 to before d7f5e35e70507d10cbaff5f9e194ed54c4ee14f7, da27a24383b2b10bf6ebd0db29b325548aafecb4 to before 925599eba46045930b850a98ae594d2e3028ac40, da27a24383b2b10bf6ebd0db29b325548aafecb4 to before c2925cd6207079c3f4d040d082515db78d63afbf, da27a24383b2b10bf6ebd0db29b325548aafecb4 to before 71581a82f38e5a4d807d71fc1bb59aead80ccf95, da27a24383b2b10bf6ebd0db29b325548aafecb4 to before a6358f8cf64850f3f27857b8ed8c1b08cfc4685c, 688289c4b745c018b3449b4b4c5a2030083c8eaf, 3.8.2 to before 3.9
Linux

Linux · 3.9
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: fs/efivarfs/super.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39823

Affected technology

linux kernel · from 4.19 (inclusive), before 5.4.298 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.242 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.191 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.150 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.104 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.45 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.5 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

debian linux · 11.0
debian

Linux · 4180bf1b655a791a0a6ef93a2ffffc762722c782 to before 72777fc31aa7ab2ce00f44bfa3929c6eabbeaf48, 4180bf1b655a791a0a6ef93a2ffffc762722c782 to before 31a0ad2f60cb4816e06218b63e695eb72ce74974, 4180bf1b655a791a0a6ef93a2ffffc762722c782 to before d51e381beed5e2f50f85f49f6c90e023754efa12, 4180bf1b655a791a0a6ef93a2ffffc762722c782 to before 33e974c2d5a82b2f9d9ba0ad9cbaabc1c8e3985f, 4180bf1b655a791a0a6ef93a2ffffc762722c782 to before f49161646e03d107ce81a99c6ca5da682fe5fb69, 4180bf1b655a791a0a6ef93a2ffffc762722c782 to before 67a05679621b7f721bdba37a5d18665d3aceb695, 4180bf1b655a791a0a6ef93a2ffffc762722c782 to before f57a4bd8d6cb5af05b8ac1be9098e249034639fb, 4180bf1b655a791a0a6ef93a2ffffc762722c782 to before c87bd4dd43a624109c3cc42d843138378a7f4548
Linux

Linux · 4.19
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: arch/x86/kvm/lapic.c, arch/x86/kvm/x86.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39824

Affected technology

linux kernel · from 4.10 (inclusive), before 5.4.298 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.242 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.191 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.150 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.104 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.45 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.5 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

debian linux · 11.0
debian

Linux · 9ce12d8be12c94334634dd57050444910415e45f to before 9a9e4a8317437bf944fa017c66e1e23a0368b5c7, 9ce12d8be12c94334634dd57050444910415e45f to before 7170122e2ae4ab378c9cdf7cc54dea8b0abbbca5, 9ce12d8be12c94334634dd57050444910415e45f to before eaae728e7335b5dbad70966e2bd520a731fdf7b2, 9ce12d8be12c94334634dd57050444910415e45f to before a8ca8fe7f516d27ece3afb995c3bd4d07dcbe62c, 9ce12d8be12c94334634dd57050444910415e45f to before 5f3c0839b173f7f33415eb098331879e547d1d2d, 9ce12d8be12c94334634dd57050444910415e45f to before c0d77e3441a92d0b4958193c9ac1c3f81c6f1d1c, 9ce12d8be12c94334634dd57050444910415e45f to before 72a4ec018c9e9bc52f4f80eb3afb5d6a6b752275, 9ce12d8be12c94334634dd57050444910415e45f to before d3af6ca9a8c34bbd8cff32b469b84c9021c9e7e4
Linux

Linux · 4.10
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: drivers/hid/hid-asus.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39828

Affected technology

linux kernel · from 2.6.12.1 (inclusive), before 5.4.298 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.242 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.191 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.150 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.104 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.45 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.5 (exclusive)
linux

linux kernel · 2.6.12
linux

linux kernel · 2.6.12 · update rc2
linux

linux kernel · 2.6.12 · update rc3
linux

linux kernel · 2.6.12 · update rc4
linux

linux kernel · 2.6.12 · update rc5
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

debian linux · 11.0
debian

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b502f16bad8f0a4cfbd023452766f21bfda39dde, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 0a6a6d4fb333f7afe22e59ffed18511a7a98efc8, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 62f368472b0aa4b5d91d9b983152855c6b6d8925, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 51872b26429077be611b0a1816e0e722278015c3, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 3c80c230d6e3e6f63d43f4c3f0bb344e3e8b119b, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 33f9e6dc66b32202b95fc861e6b3ea4b0c185b0b, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 3ab9f5ad9baefe6d3d4c37053cdfca2761001dfe, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ec79003c5f9d2c7f9576fc69b8dbda80305cbe3a
Linux

Linux · 2.6.12
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: drivers/atm/atmtcp.c, include/linux/atmdev.h, net/atm/common.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39835

Affected technology

linux kernel · from 5.9 (inclusive), before 5.10.242 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.191 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.150 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.104 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.45 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.5 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

debian linux · 11.0
debian

Linux · 07120f1abdff80f3d1351f733661abe28d609535 to before 157ddfb05961c68ab7d457a462822a698e4e4bf4, 07120f1abdff80f3d1351f733661abe28d609535 to before 90bae69c2959c39912f0c2f07a9a7894f3fc49f5, 07120f1abdff80f3d1351f733661abe28d609535 to before e358d4b6225e4c1eb208686a05e360ef8df59e07, 07120f1abdff80f3d1351f733661abe28d609535 to before d3cc7476b89fb45b7e00874f4f56f6b928467c60, 07120f1abdff80f3d1351f733661abe28d609535 to before dcdf36f1b67884c722abce9b8946e34ffb9f67c8, 07120f1abdff80f3d1351f733661abe28d609535 to before 39fc2742ca14f7fbc621ce9b43bcbd00248cb9a8, 07120f1abdff80f3d1351f733661abe28d609535 to before ae668cd567a6a7622bc813ee0bb61c42bed61ba7
Linux

Linux · 5.9
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: fs/xfs/libxfs/xfs_attr_remote.c, fs/xfs/libxfs/xfs_da_btree.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39839

Affected technology

linux kernel · from 3.10 (inclusive), before 5.4.299 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.243 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.192 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.151 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.105 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.46 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.6 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

linux kernel · 6.17 · update rc4
linux

debian linux · 11.0
debian

Linux · 2df5278b0267c799f3e877e8eeddbb6e93cda0bb to before 30fc47248f02b8a14a61df469e1da4704be1a19f, 2df5278b0267c799f3e877e8eeddbb6e93cda0bb to before 1e36c6c8dc8023b4bbe9a16e819f9998b9b6a183, 2df5278b0267c799f3e877e8eeddbb6e93cda0bb to before 5d334bce9fad58cf328d8fa14ea1fff855819863, 2df5278b0267c799f3e877e8eeddbb6e93cda0bb to before dce6c2aa70e94c04c523b375dfcc664d7a0a560a, 2df5278b0267c799f3e877e8eeddbb6e93cda0bb to before bb37252c9af1cb250f34735ee98f80b46be3cef1, 2df5278b0267c799f3e877e8eeddbb6e93cda0bb to before 20080709457bc1e920eb002483d7d981d9b2ac1c, 2df5278b0267c799f3e877e8eeddbb6e93cda0bb to before a67c6397fcb7e842d3c595243049940970541c48, 2df5278b0267c799f3e877e8eeddbb6e93cda0bb to before d77b6ff0ce35a6d0b0b7b9581bc3f76d041d4087
Linux

Linux · 3.10
Linux

RUGGEDCOM RST2428P · 0 to before V3.3
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.3
Siemens

SCALANCE XCH328 · 0 to before V3.3
Siemens

SCALANCE XCM324 · 0 to before V3.3
Siemens

SCALANCE XCM328 · 0 to before V3.3
Siemens

SCALANCE XCM332 · 0 to before V3.3
Siemens

SCALANCE XRH334 (24 V DC, 8xFO, CC) · 0 to before V3.3
Siemens

SCALANCE XRM334 (230 V AC, 12xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (230 V AC, 8xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) · 0 to before V3.3
Siemens

SCALANCE XRM334 (24 V DC, 12xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (24 V DC, 8xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) · 0 to before V3.3
Siemens

SCALANCE XRM334 (2x230 V AC, 12xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (2x230 V AC, 8xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) · 0 to before V3.3
Siemens

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: net/batman-adv/network-coding.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39841

Affected technology

linux kernel · from 5.1 (inclusive), before 5.4.299 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.243 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.192 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.151 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.105 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.46 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.6 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

linux kernel · 6.17 · update rc4
linux

debian linux · 11.0
debian

Linux · 472e146d1cf3410a898b49834500fa9e33ac41a2 to before ab34084f42ee06a9028d67c78feafb911d33d111, 472e146d1cf3410a898b49834500fa9e33ac41a2 to before baa39f6ad79d372a6ce0aa639fbb2f1578479f57, 472e146d1cf3410a898b49834500fa9e33ac41a2 to before 95b63d15fce5c54a73bbf195e1aacb5a75b128e2, 472e146d1cf3410a898b49834500fa9e33ac41a2 to before 55658c7501467ca9ef3bd4453dd920010db8bc13, 472e146d1cf3410a898b49834500fa9e33ac41a2 to before d96cc9a1b57725930c60b607423759d563b4d900, 472e146d1cf3410a898b49834500fa9e33ac41a2 to before 367cb5ffd8a8a4c85dc89f55e7fa7cc191425b11, 472e146d1cf3410a898b49834500fa9e33ac41a2 to before 897f64b01c1249ac730329b83f4f40bab71e86c7, 472e146d1cf3410a898b49834500fa9e33ac41a2 to before 9dba9a45c348e8460da97c450cddf70b2056deb3
Linux

Linux · 5.1
Linux

RUGGEDCOM RST2428P · 0 to before V3.3
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.3
Siemens

SCALANCE XCH328 · 0 to before V3.3
Siemens

SCALANCE XCM324 · 0 to before V3.3
Siemens

SCALANCE XCM328 · 0 to before V3.3
Siemens

SCALANCE XCM332 · 0 to before V3.3
Siemens

SCALANCE XRH334 (24 V DC, 8xFO, CC) · 0 to before V3.3
Siemens

SCALANCE XRM334 (230 V AC, 12xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (230 V AC, 8xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) · 0 to before V3.3
Siemens

SCALANCE XRM334 (24 V DC, 12xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (24 V DC, 8xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) · 0 to before V3.3
Siemens

SCALANCE XRM334 (2x230 V AC, 12xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (2x230 V AC, 8xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) · 0 to before V3.3
Siemens

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: drivers/scsi/lpfc/lpfc_nvmet.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39844

Affected technology

linux kernel · from 5.13 (inclusive), before 5.15.192 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.151 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.105 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.46 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.6 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

linux kernel · 6.17 · update rc4
linux

debian linux · 11.0
debian

Linux · 8d400913c231bd1da74067255816453f96cd35b0 to before 732e62212f49d549c91071b4da7942ee3058f7a2, 8d400913c231bd1da74067255816453f96cd35b0 to before eceb44e1f94bd641b2a4e8c09b64c797c4eabc15, 8d400913c231bd1da74067255816453f96cd35b0 to before 6797a8b3f71b2cb558b8771a03450dc3e004e453, 8d400913c231bd1da74067255816453f96cd35b0 to before 4f7537772011fad832f83d6848f8eab282545bef, 8d400913c231bd1da74067255816453f96cd35b0 to before 469f9d22751472b81eaaf8a27fcdb5a70741c342, 8d400913c231bd1da74067255816453f96cd35b0 to before 7cc183f2e67d19b03ee5c13a6664b8c6cc37ff9d
Linux

Linux · 5.13
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: include/linux/pgtable.h, include/linux/vmalloc.h

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39845

Affected technology

linux kernel · from 5.13 (inclusive), before 5.15.192 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.151 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.105 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.46 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.6 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

linux kernel · 6.17 · update rc4
linux

debian linux · 11.0
debian

Linux · 8d400913c231bd1da74067255816453f96cd35b0 to before 744ff519c72de31344a627eaf9b24e9595aae554, 8d400913c231bd1da74067255816453f96cd35b0 to before 5f761d40ee95d2624f839c90ebeef2d5c55007f5, 8d400913c231bd1da74067255816453f96cd35b0 to before 26ff568f390a531d1bd792e49f1a401849921960, 8d400913c231bd1da74067255816453f96cd35b0 to before b7f4051dd3388edd30e9a6077c05c486aa31e0d4, 8d400913c231bd1da74067255816453f96cd35b0 to before 6bf9473727569e8283c1e2445c7ac42cf4fc9fa9, 8d400913c231bd1da74067255816453f96cd35b0 to before 6659d027998083fbb6d42a165b0c90dc2e8ba989
Linux

Linux · 5.13
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: arch/x86/include/asm/pgtable_64_types.h, arch/x86/mm/init_64.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39846

Affected technology

linux kernel · from 2.6.35 (inclusive), before 5.4.299 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.243 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.192 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.151 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.105 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.46 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.6 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

linux kernel · 6.17 · update rc4
linux

debian linux · 11.0
debian

Linux · 49b1153adfe18a3cce7e70aa26c690f275917cd0 to before b990c8c6ff50649ad3352507398e443b1e3527b2, 49b1153adfe18a3cce7e70aa26c690f275917cd0 to before 5ff2826c998370bf7f9ae26fe802140d220e3510, 49b1153adfe18a3cce7e70aa26c690f275917cd0 to before 4bd570f494124608a0696da070f00236a96fb610, 49b1153adfe18a3cce7e70aa26c690f275917cd0 to before ce3b7766276894d2fbb07e2047a171f9deb965de, 49b1153adfe18a3cce7e70aa26c690f275917cd0 to before 2ee32c4c4f636e474cd8ab7c19a68cf36072ea93, 49b1153adfe18a3cce7e70aa26c690f275917cd0 to before fafa7450075f41d232bc785a4ebcbf16374f2076, 49b1153adfe18a3cce7e70aa26c690f275917cd0 to before d7286005e8fde0a430dc180a9f46c088c7d74483, 49b1153adfe18a3cce7e70aa26c690f275917cd0 to before 44822df89e8f3386871d9cad563ece8e2fd8f0e7
Linux

Linux · 2.6.35
Linux

RUGGEDCOM RST2428P · 0 to before V3.3
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.3
Siemens

SCALANCE XCH328 · 0 to before V3.3
Siemens

SCALANCE XCM324 · 0 to before V3.3
Siemens

SCALANCE XCM328 · 0 to before V3.3
Siemens

SCALANCE XCM332 · 0 to before V3.3
Siemens

SCALANCE XRH334 (24 V DC, 8xFO, CC) · 0 to before V3.3
Siemens

SCALANCE XRM334 (230 V AC, 12xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (230 V AC, 8xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) · 0 to before V3.3
Siemens

SCALANCE XRM334 (24 V DC, 12xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (24 V DC, 8xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) · 0 to before V3.3
Siemens

SCALANCE XRM334 (2x230 V AC, 12xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (2x230 V AC, 8xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) · 0 to before V3.3
Siemens

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: drivers/pcmcia/rsrc_iodyn.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39847

Affected technology

linux kernel · from 2.6.15 (inclusive), before 5.4.299 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.243 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.192 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.151 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.105 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.46 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.6 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

linux kernel · 6.17 · update rc4
linux

debian linux · 11.0
debian

Linux · b3f9b92a6ec1a9a5e4b4b36e484f2f62cc73277c to before 9ca6a040f76c0b149293e430dabab446f3fc8ab7, b3f9b92a6ec1a9a5e4b4b36e484f2f62cc73277c to before 87a35a36742df328d0badf4fbc2e56061c15846c, b3f9b92a6ec1a9a5e4b4b36e484f2f62cc73277c to before 0b21e9cd4559102da798bdcba453b64ecd7be7ee, b3f9b92a6ec1a9a5e4b4b36e484f2f62cc73277c to before 1d8b354eafb8876d8bdb1bef69c7d2438aacfbe8, b3f9b92a6ec1a9a5e4b4b36e484f2f62cc73277c to before 85c1c86a67e09143aa464e9bf09c397816772348, b3f9b92a6ec1a9a5e4b4b36e484f2f62cc73277c to before 631fc8ab5beb9e0ec8651fb9875b9a968e7b4ae4, b3f9b92a6ec1a9a5e4b4b36e484f2f62cc73277c to before 33a5bac5f14772730d2caf632ae97b6c2ee95044, b3f9b92a6ec1a9a5e4b4b36e484f2f62cc73277c to before 4844123fe0b853a4982c02666cb3fd863d701d50
Linux

Linux · 2.6.15
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: drivers/net/ppp/ppp_generic.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39848

Affected technology

linux kernel · from 2.6.12.1 (inclusive), before 5.4.299 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.243 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.192 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.151 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.105 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.46 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.6 (exclusive)
linux

linux kernel · 2.6.12
linux

linux kernel · 2.6.12 · update rc2
linux

linux kernel · 2.6.12 · update rc3
linux

linux kernel · 2.6.12 · update rc4
linux

linux kernel · 2.6.12 · update rc5
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

linux kernel · 6.17 · update rc4
linux

debian linux · 11.0
debian

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 42b46684e2c78ee052d8c2ee8d9c2089233c9094, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 5b079be1b9da49ad88fc304c874d4be7085f7883, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2bd0f67212908243ce88e35bf69fa77155b47b14, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 01a2984cb803f2d487b7074f9718db2bf3531f69, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7d449b7a6c8ee434d10a483feed7c5c50108cf56, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 89064cf534bea4bb28c83fe6bbb26657b19dd5fe, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b1c71d674a308d2fbc83efcf88bfc4217a86aa17, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8156210d36a43e76372312c87eb5ea3dbb405a85
Linux

Linux · 2.6.12
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: net/ax25/ax25_in.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39853

Affected technology

linux kernel · from 4.6 (inclusive), before 5.4.299 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.243 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.192 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.151 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.105 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.46 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.6 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

linux kernel · 6.17 · update rc4
linux

debian linux · 11.0
debian

Linux · e3219ce6a775468368fb270fae3eb82a6787b436 to before 971feafe157afac443027acdc235badc6838560b, e3219ce6a775468368fb270fae3eb82a6787b436 to before 3c6fb929afa313d9d11f780451d113f73922fe5d, e3219ce6a775468368fb270fae3eb82a6787b436 to before 1eadabcf5623f1237a539b16586b4ed8ac8dffcd, e3219ce6a775468368fb270fae3eb82a6787b436 to before e2a5e74879f9b494bbd66fa93f355feacde450c7, e3219ce6a775468368fb270fae3eb82a6787b436 to before fb216d980fae6561c7c70af8ef826faf059c6515, e3219ce6a775468368fb270fae3eb82a6787b436 to before 66e7cdbda74ee823ec2bf7b830ebd235c54f5ddf, e3219ce6a775468368fb270fae3eb82a6787b436 to before 9c21fc4cebd44dd21016c61261a683af390343f8, e3219ce6a775468368fb270fae3eb82a6787b436 to before a556f06338e1d5a85af0e32ecb46e365547f92b9
Linux

Linux · 4.6
Linux

RUGGEDCOM RST2428P · 0 to before V3.3
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.3
Siemens

SCALANCE XCH328 · 0 to before V3.3
Siemens

SCALANCE XCM324 · 0 to before V3.3
Siemens

SCALANCE XCM328 · 0 to before V3.3
Siemens

SCALANCE XCM332 · 0 to before V3.3
Siemens

SCALANCE XRH334 (24 V DC, 8xFO, CC) · 0 to before V3.3
Siemens

SCALANCE XRM334 (230 V AC, 12xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (230 V AC, 8xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) · 0 to before V3.3
Siemens

SCALANCE XRM334 (24 V DC, 12xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (24 V DC, 8xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) · 0 to before V3.3
Siemens

SCALANCE XRM334 (2x230 V AC, 12xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (2x230 V AC, 8xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) · 0 to before V3.3
Siemens

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: drivers/net/ethernet/intel/i40e/i40e_client.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39860

Affected technology

linux kernel · from 4.14.322 (inclusive), before 4.15 (exclusive)
linux

linux kernel · from 4.19.291 (inclusive), before 4.20 (exclusive)
linux

linux kernel · from 5.4.253 (inclusive), before 5.4.299 (exclusive)
linux

linux kernel · from 5.10.190 (inclusive), before 5.10.243 (exclusive)
linux

linux kernel · from 5.15.126 (inclusive), before 5.15.192 (exclusive)
linux

linux kernel · from 6.1.45 (inclusive), before 6.1.151 (exclusive)
linux

linux kernel · from 6.4.10 (inclusive), before 6.6.105 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.46 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.6 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

linux kernel · 6.17 · update rc4
linux

debian linux · 11.0
debian

Linux · a2da00d1ea1abfb04f846638e210b5b5166e3c9c to before 964cbb198f9c46c2b2358cd1faffc04c1e8248cf, 06f87c96216bc5cd1094c23492274f77f1d5dd3b to before 83e1d9892ef51785cf0760b7681436760dda435a, fbe5a2fed8156cc19eb3b956602b0a1dd46a302d to before 47f6090bcf75c369695d21c3f179db8a56bbbd49, 29fac18499332211b2615ade356e2bd8b3269f98 to before 2ca99fc3512a8074de20ee52a87b492dfcc41a4d, 1728137b33c00d5a2b5110ed7aafb42e7c32e4a1 to before 6077d16b5c0f65d571eee709de2f0541fb5ef0ca, 1728137b33c00d5a2b5110ed7aafb42e7c32e4a1 to before 306b0991413b482dbf5585b423022123bb505966, 1728137b33c00d5a2b5110ed7aafb42e7c32e4a1 to before 3dff390f55ccd9ce12e91233849769b5312180c2, 1728137b33c00d5a2b5110ed7aafb42e7c32e4a1 to before 862c628108562d8c7a516a900034823b381d3cba, 51822644a047eac2310fab0799b64e3430b5a111, 82cdb2ccbe43337798393369f0ceb98699fe6037, 10426afe65c8bf7b24dd0c7be4dcc65f86fc99f9, 5.4.253 to before 5.4.299, 5.10.190 to before 5.10.243, 5.15.126 to before 5.15.192, 6.1.45 to before 6.1.151, 4.14.322 to before 4.15, 4.19.291 to before 4.20, 6.4.10 to before 6.5
Linux

Linux · 6.5
Linux

RUGGEDCOM RST2428P · 0 to before V3.3
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.3
Siemens

SCALANCE XCH328 · 0 to before V3.3
Siemens

SCALANCE XCM324 · 0 to before V3.3
Siemens

SCALANCE XCM328 · 0 to before V3.3
Siemens

SCALANCE XCM332 · 0 to before V3.3
Siemens

SCALANCE XRH334 (24 V DC, 8xFO, CC) · 0 to before V3.3
Siemens

SCALANCE XRM334 (230 V AC, 12xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (230 V AC, 8xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) · 0 to before V3.3
Siemens

SCALANCE XRM334 (24 V DC, 12xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (24 V DC, 8xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) · 0 to before V3.3
Siemens

SCALANCE XRM334 (2x230 V AC, 12xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (2x230 V AC, 8xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) · 0 to before V3.3
Siemens

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: net/bluetooth/l2cap_sock.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.0/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39864

Affected technology

linux kernel · from 5.4 (inclusive), before 5.4.299 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.243 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.192 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.151 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.105 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.46 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.6 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

linux kernel · 6.17 · update rc4
linux

debian linux · 11.0
debian

Linux · 3ab8227d3e7d1d2bf1829675d3197e3cb600e9f6 to before a8bb681e879ca3c9f722aa08d3d7ae41c42a8807, 3ab8227d3e7d1d2bf1829675d3197e3cb600e9f6 to before a97a9791e455bb0cd5e7a38b5abcb05523d4e21c, 3ab8227d3e7d1d2bf1829675d3197e3cb600e9f6 to before ff040562c10a540b8d851f7f4145fa112977f853, 3ab8227d3e7d1d2bf1829675d3197e3cb600e9f6 to before 6854476d9e1aeaaf05ebc98d610061c2075db07d, 3ab8227d3e7d1d2bf1829675d3197e3cb600e9f6 to before b7d08929178c16398278613df07ad65cf63cce9d, 3ab8227d3e7d1d2bf1829675d3197e3cb600e9f6 to before 5b7ae04969f822283a95c866967e42b4d75e0eef, 3ab8227d3e7d1d2bf1829675d3197e3cb600e9f6 to before 912c4b66bef713a20775cfbf3b5e9bd71525c716, 3ab8227d3e7d1d2bf1829675d3197e3cb600e9f6 to before 26e84445f02ce6b2fe5f3e0e28ff7add77f35e08
Linux

Linux · 5.4
Linux

RUGGEDCOM RST2428P · 0 to before V3.3
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.3
Siemens

SCALANCE XCH328 · 0 to before V3.3
Siemens

SCALANCE XCM324 · 0 to before V3.3
Siemens

SCALANCE XCM328 · 0 to before V3.3
Siemens

SCALANCE XCM332 · 0 to before V3.3
Siemens

SCALANCE XRH334 (24 V DC, 8xFO, CC) · 0 to before V3.3
Siemens

SCALANCE XRM334 (230 V AC, 12xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (230 V AC, 8xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) · 0 to before V3.3
Siemens

SCALANCE XRM334 (24 V DC, 12xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (24 V DC, 8xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) · 0 to before V3.3
Siemens

SCALANCE XRM334 (2x230 V AC, 12xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (2x230 V AC, 8xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) · 0 to before V3.3
Siemens

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: net/wireless/scan.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39865

Affected technology

linux kernel · from 4.14.261 (inclusive), before 4.15 (exclusive)
linux

linux kernel · from 4.19.224 (inclusive), before 4.20 (exclusive)
linux

linux kernel · from 5.4.170 (inclusive), before 5.5 (exclusive)
linux

linux kernel · from 5.10.89 (inclusive), before 5.10.243 (exclusive)
linux

linux kernel · from 5.15.12 (inclusive), before 5.15.192 (exclusive)
linux

linux kernel · from 5.16.1 (inclusive), before 6.1.151 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.105 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.46 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.6 (exclusive)
linux

linux kernel · 5.16
linux

linux kernel · 5.16 · update rc7
linux

linux kernel · 5.16 · update rc8
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

linux kernel · 6.17 · update rc4
linux

debian linux · 11.0
debian

Linux · c05d8f66ec3470e5212c4d08c46d6cb5738d600d to before f266188603c34e6e234fb0dfc3185f0ba98d71b7, 492eb7afe858d60408b2da09adc78540c4d16543 to before 4377eac565c297fdfccd2f8e9bf94ee84ff6172f, dfd0743f1d9ea76931510ed150334d571fbab49d to before 25e315bc8ad363bd1194e49062f183ad4011957e, dfd0743f1d9ea76931510ed150334d571fbab49d to before add1ecc8f3ad8df22e3599c5c88d7907cc2a3079, dfd0743f1d9ea76931510ed150334d571fbab49d to before 963fca19fe34c496e04f7dd133b807b76a5434ca, dfd0743f1d9ea76931510ed150334d571fbab49d to before 5e07a4235bb85d9ef664411e4ff4ac34783c18ff, dfd0743f1d9ea76931510ed150334d571fbab49d to before e4a718a3a47e89805c3be9d46a84de1949a98d5d, 3d556a28bbfe34a80b014db49908b0f1bcb1ae80, b4a661b4212b8fac8853ec3b68e4a909dccc88a1, 940e68e57ab69248fabba5889e615305789db8a7, 5.10.89 to before 5.10.243, 5.15.12 to before 5.15.192, 4.14.261 to before 4.15, 4.19.224 to before 4.20, 5.4.170 to before 5.5
Linux

Linux · 5.16
Linux

RUGGEDCOM RST2428P · 0 to before V3.3
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.3
Siemens

SCALANCE XCH328 · 0 to before V3.3
Siemens

SCALANCE XCM324 · 0 to before V3.3
Siemens

SCALANCE XCM328 · 0 to before V3.3
Siemens

SCALANCE XCM332 · 0 to before V3.3
Siemens

SCALANCE XRH334 (24 V DC, 8xFO, CC) · 0 to before V3.3
Siemens

SCALANCE XRM334 (230 V AC, 12xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (230 V AC, 8xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) · 0 to before V3.3
Siemens

SCALANCE XRM334 (24 V DC, 12xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (24 V DC, 8xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) · 0 to before V3.3
Siemens

SCALANCE XRM334 (2x230 V AC, 12xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (2x230 V AC, 8xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) · 0 to before V3.3
Siemens

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: drivers/tee/tee_shm.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39866

Affected technology

linux kernel · from 4.2 (inclusive), before 5.10.247 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.192 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.151 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.105 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.46 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.6 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

debian linux · 11.0
debian

Linux · 0747259d13febfcc838980a63c414c9b920cea6f to before e2a14bbae5d8bacaa301362744a110e2be40a3a3, 0747259d13febfcc838980a63c414c9b920cea6f to before b187c976111960e6e54a6b1fff724f6e3d39406c, 0747259d13febfcc838980a63c414c9b920cea6f to before 1edc2feb9c759a9883dfe81cb5ed231412d8b2e4, 0747259d13febfcc838980a63c414c9b920cea6f to before bf89b1f87c72df79cf76203f71fbf8349cd5c9de, 0747259d13febfcc838980a63c414c9b920cea6f to before e63052921f1b25a836feb1500b841bff7a4a0456, 0747259d13febfcc838980a63c414c9b920cea6f to before c8c14adf80bd1a6e4a1d7ee9c2a816881c26d17a, 0747259d13febfcc838980a63c414c9b920cea6f to before d02d2c98d25793902f65803ab853b592c7a96b29
Linux

Linux · 4.2
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: fs/fs-writeback.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39891

Affected technology

linux kernel · from 3.19 (inclusive), before 5.4.299 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.243 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.192 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.151 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.105 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.46 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.6 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

linux kernel · 6.17 · update rc4
linux

debian linux · 11.0
debian

Linux · bf35443314acb43fa8a3f9f8046e14cbe178762b to before 9eb0118b3470b4d2e4e3bbb1fc088b30c0285d65, bf35443314acb43fa8a3f9f8046e14cbe178762b to before 05daef0442d28350a1a0d6d0e2cab4a7a91df475, bf35443314acb43fa8a3f9f8046e14cbe178762b to before acdf26a912190fc6746e2a890d7d0338190527b4, bf35443314acb43fa8a3f9f8046e14cbe178762b to before 32c124c9c03aa755cbaf60ef7f76afd918d47659, bf35443314acb43fa8a3f9f8046e14cbe178762b to before 9df29aa5637d94d24f7c5f054ef4feaa7b766111, bf35443314acb43fa8a3f9f8046e14cbe178762b to before 06616410a3e5e6cd1de5b7cbc668f1a7edeedad9, bf35443314acb43fa8a3f9f8046e14cbe178762b to before 5285b7009dc1e09d5bb9e05fae82e1a807882dbc, bf35443314acb43fa8a3f9f8046e14cbe178762b to before 0e20450829ca3c1dbc2db536391537c57a40fe0b
Linux

Linux · 3.19
Linux

Component: Not specified by the source
Function: doesn
File: drivers/net/wireless/marvell/mwifiex/cfg80211.c, drivers/net/wireless/marvell/mwifiex/main.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

And then the user can query the data in mwifiex_cfg80211_dump_survey(). NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none.

CVE-2025-39894

Affected technology

linux kernel · from 5.15.151 (inclusive), before 5.15.192 (exclusive)
linux

linux kernel · from 6.1.81 (inclusive), before 6.1.151 (exclusive)
linux

linux kernel · from 6.6.21 (inclusive), before 6.6.105 (exclusive)
linux

linux kernel · from 6.7.9 (inclusive), before 6.8 (exclusive)
linux

linux kernel · from 6.8.1 (inclusive), before 6.12.46 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.6 (exclusive)
linux

linux kernel · 6.8
linux

linux kernel · 6.8 · update rc7
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

linux kernel · 6.17 · update rc4
linux

debian linux · 11.0
debian

Linux · 7c3f28599652acf431a2211168de4a583f30b6d5 to before d00c8b0daf56012f69075e3377da67878c775e4c, 2b1414d5e94e477edff1d2c79030f1d742625ea0 to before ccbad4803225eafe0175d3cb19f0d8d73b504a94, 80cd0487f630b5382734997c3e5e3003a77db315 to before 50db11e2bbb635e38e3dd096215580d6adb41fb0, 62e7151ae3eb465e0ab52a20c941ff33bb6332e9 to before c47ca77fee9071aa543bae592dd2a384f895c8b6, 62e7151ae3eb465e0ab52a20c941ff33bb6332e9 to before a74abcf0f09f59daeecf7a3ba9c1d690808b0afe, 62e7151ae3eb465e0ab52a20c941ff33bb6332e9 to before 479a54ab92087318514c82428a87af2d7af1a576, cb734975b0ffa688ff6cc0eed463865bf07b6c01, 5.15.151 to before 5.15.192, 6.1.81 to before 6.1.151, 6.6.21 to before 6.6.105, 6.7.9 to before 6.8
Linux

Linux · 6.8
Linux

Component: Not specified by the source
File: net/bridge/br_netfilter_hooks.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39902

Affected technology

linux kernel · from 2.6.22 (inclusive), before 5.4.299 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.243 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.192 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.151 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.105 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.46 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.6 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

linux kernel · 6.17 · update rc4
linux

debian linux · 11.0
debian

Linux · 81819f0fc8285a2a5a921c019e3e3d7b6169d225 to before 872f2c34ff232af1e65ad2df86d61163c8ffad42, 81819f0fc8285a2a5a921c019e3e3d7b6169d225 to before f66012909e7bf383fcdc5850709ed5716073fdc4, 81819f0fc8285a2a5a921c019e3e3d7b6169d225 to before 7e287256904ee796c9477e3ec92b07f236481ef3, 81819f0fc8285a2a5a921c019e3e3d7b6169d225 to before 1f0797f17927b5cad0fb7eced422f9a7c30a3191, 81819f0fc8285a2a5a921c019e3e3d7b6169d225 to before 0ef7058b4dc6fcef622ac23b45225db57f17b83f, 81819f0fc8285a2a5a921c019e3e3d7b6169d225 to before dda6ec365ab04067adae40ef17015db447e90736, 81819f0fc8285a2a5a921c019e3e3d7b6169d225 to before 3baa1da473e6e50281324ff1d332d1a07a3bb02e, 81819f0fc8285a2a5a921c019e3e3d7b6169d225 to before b4efccec8d06ceb10a7d34d7b1c449c569d53770
Linux

Linux · 2.6.22
Linux

Component: Not specified by the source
File: mm/slub.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39920

Affected technology

linux kernel · from 2.6.34 (inclusive), before 5.4.299 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.243 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.192 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.151 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.105 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.46 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.6 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

linux kernel · 6.17 · update rc4
linux

debian linux · 11.0
debian

Linux · 7b4884ca8853a638df0eb5d251d80d67777b8b1a to before 5b60ed401b47897352c520bc724c85aa908dedcc, 7b4884ca8853a638df0eb5d251d80d67777b8b1a to before ae184024ef31423e5beb44cf4f52999bbcf2fe5b, 7b4884ca8853a638df0eb5d251d80d67777b8b1a to before 85be7ef8c8e792a414940a38d94565dd48d2f236, 7b4884ca8853a638df0eb5d251d80d67777b8b1a to before 06b26e3099207c94b3d1be8565aedc6edc4f0a60, 7b4884ca8853a638df0eb5d251d80d67777b8b1a to before 8699358b6ac99b8ccc97ed9e6e3669ef8958ef7b, 7b4884ca8853a638df0eb5d251d80d67777b8b1a to before 289b58f8ff3198d091074a751d6b8f6827726f3e, 7b4884ca8853a638df0eb5d251d80d67777b8b1a to before 369bf6e241506583f4ee7593c53b92e5a9f271b4, 7b4884ca8853a638df0eb5d251d80d67777b8b1a to before 4a81f78caa53e0633cf311ca1526377d9bff7479
Linux

Linux · 2.6.34
Linux

Component: Not specified by the source
Function: will
File: drivers/pcmcia/rsrc_nonstatic.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39964

Affected technology

linux kernel · from 2.6.38 (inclusive), before 5.10.245 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.194 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.154 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.108 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.49 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.9 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

linux kernel · 6.17 · update rc4
linux

linux kernel · 6.17 · update rc5
linux

linux kernel · 6.17 · update rc6
linux

simatic s7-1500 cpu 1518-4 pn/dp mfp firmware · from 3.1.6 (inclusive)
siemens

simatic s7-1500 cpu 1518f-4 pn/dp mfp firmware · from 3.1.6 (inclusive)
siemens

Linux · 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 to before 0f28c4adbc4a97437874c9b669fd7958a8c6d6ce, 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 to before e4c1ec11132ec466f7362a95f36a506ce4dc08c9, 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 to before 1f323a48e9b5ebfe6dc7d130fdf5c3c0e92a07c8, 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 to before 7c4491b5644e3a3708f3dbd7591be0a570135b84, 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 to before 9aee87da5572b3a14075f501752e209801160d3d, 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 to before 45bcf60fe49b37daab1acee57b27211ad1574042, 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 to before 1b34cbbf4f011a121ef7b2d7d6e6920a036d5285
Linux

Linux · 2.6.38
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: crypto/af_alg.c, include/crypto/if_alg.h

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39993

Affected technology

Linux · 21677cfc562a27e099719d413287bc8d1d24deb7 to before 9348976003e39754af344949579e824a0a210fc4, 21677cfc562a27e099719d413287bc8d1d24deb7 to before b03fac6e2a38331faf8510b480becfa90cea1c9f, 21677cfc562a27e099719d413287bc8d1d24deb7 to before 71c52b073922d05e79e6de7fc7f5f38f927929a4, 21677cfc562a27e099719d413287bc8d1d24deb7 to before 71096a6161a25e84acddb89a9d77f138502d26ab, 21677cfc562a27e099719d413287bc8d1d24deb7 to before 71da40648741d15b302700b68973fe8b382aef3c, 21677cfc562a27e099719d413287bc8d1d24deb7 to before fd5d3e6b149ec8cce045d86a2b5e3664d6b32ba5, 21677cfc562a27e099719d413287bc8d1d24deb7 to before d9f6ce99624a41c3bcb29a8d7d79b800665229dd, 21677cfc562a27e099719d413287bc8d1d24deb7 to before 2e7fd93b9cc565b839bc55a6662475718963e156, 21677cfc562a27e099719d413287bc8d1d24deb7 to before fa0f61cc1d828178aa921475a9b786e7fbb65ccb
Linux

Linux · 2.6.35
Linux

Component: Not specified by the source
File: drivers/media/rc/imon.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

A local attacker with low privileges can trigger a use-after-free error. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not state a further attacker outcome.

CVE-2025-40018

Affected technology

Linux · 61b1ab4583e275af216c8454b9256de680499b19 to before 8a6ecab3847c213ce2855b0378e63ce839085de3, 61b1ab4583e275af216c8454b9256de680499b19 to before 421b1ae1574dfdda68b835c15ac4921ec0030182, 61b1ab4583e275af216c8454b9256de680499b19 to before 1d79471414d7b9424d699afff2aa79fff322f52d, 61b1ab4583e275af216c8454b9256de680499b19 to before 53717f8a4347b78eac6488072ad8e5adbaff38d9, 61b1ab4583e275af216c8454b9256de680499b19 to before 8cbe2a21d85727b66d7c591fd5d83df0d8c4f757, 61b1ab4583e275af216c8454b9256de680499b19 to before dc1a481359a72ee7e548f1f5da671282a7c13b8f, 61b1ab4583e275af216c8454b9256de680499b19 to before a343811ef138a265407167294275201621e9ebb2, 61b1ab4583e275af216c8454b9256de680499b19 to before 134121bfd99a06d44ef5ba15a9beb075297c0821
Linux

Linux · 2.6.39
Linux

Component: Not specified by the source
File: net/netfilter/ipvs/ip_vs_ftp.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-40300

Affected technology

linux kernel · from 3.16.57 (inclusive), before 3.17 (exclusive)
linux

linux kernel · from 4.4.168 (inclusive), before 4.5 (exclusive)
linux

linux kernel · from 4.16 (inclusive), before 5.10.244 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.193 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.152 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.106 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.47 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.7 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

linux kernel · 6.17 · update rc4
linux

linux kernel · 6.17 · update rc5
linux

debian linux · 11.0
debian

Linux · 15d45071523d89b3fb7372e2135fbd72f6af9506 to before ac60717f9a8d21c58617d0b34274babf24135835, 15d45071523d89b3fb7372e2135fbd72f6af9506 to before c08192b5d6730a914dee6175bc71092ee6a65f14, 15d45071523d89b3fb7372e2135fbd72f6af9506 to before d5490dfa35427a2967e00a4c7a1b95fdbc8ede34, 15d45071523d89b3fb7372e2135fbd72f6af9506 to before 2f4f2f8f860cb4c3336a7435ebe8dcfded0c9c6e, 15d45071523d89b3fb7372e2135fbd72f6af9506 to before 15006289e5c38b2a830e1fba221977a27598176c, 15d45071523d89b3fb7372e2135fbd72f6af9506 to before 893387c18612bb452336a5881da0d015a7e8f4a2, 15d45071523d89b3fb7372e2135fbd72f6af9506 to before f866eef8d1c65504d30923c3f14082ad294d0e6d, 15d45071523d89b3fb7372e2135fbd72f6af9506 to before 34e5667041050711a947e260fc9ebebe08bddee5, 15d45071523d89b3fb7372e2135fbd72f6af9506 to before d7ddc93392e4a7ffcccc86edf6ef3e64c778db52, 15d45071523d89b3fb7372e2135fbd72f6af9506 to before 459274c77b37ac63b78c928b4b4e748d1f9d05c8, 15d45071523d89b3fb7372e2135fbd72f6af9506 to before 510603f504796c3535f67f55fb0b124a303b44c8, 15d45071523d89b3fb7372e2135fbd72f6af9506 to before 9c23a90648e831d611152ac08dbcd1283d405e7f, 15d45071523d89b3fb7372e2135fbd72f6af9506 to before 2f8f173413f1cbf52660d04df92d0069c4306d25, c51f1e5f57cca88d8d5894b6fad1638f643a99d0, 4b3870c343a82cd2df7192cc5149c87205dcc611, 3.16.57 to before 3.17, 4.4.168 to before 4.5
Linux

Linux · 4.16
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: arch/x86/include/asm/cpufeatures.h, arch/x86/include/asm/entry-common.h, arch/x86/include/asm/nospec-branch.h, arch/x86/kernel/cpu/bugs.c, arch/x86/kvm/x86.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.