CVE-2024-36350, CVE-2024-36357, CVE-2025-38084 +170 more CVEs: linux kernel 6.4, 6.14; +8 more affected products

CVE-2024-36350

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-36357

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38084

Affected technology

linux kernel · from 2.6.20 (inclusive), before 5.10.239 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.186 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.142 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.95 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.35 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.4 (exclusive)
linux

debian linux · 11.0
debian

Linux · 39dde65c9940c97fcd178a3d2b1c57ed8b7b68aa to before e8847d18cd9fff1edbb45e963d9141273c3b539c, 39dde65c9940c97fcd178a3d2b1c57ed8b7b68aa to before 366298f2b04d2bf1f2f2b7078405bdf9df9bd5d0, 39dde65c9940c97fcd178a3d2b1c57ed8b7b68aa to before 2511ac64bc1617ca716d3ba8464e481a647c1902, 39dde65c9940c97fcd178a3d2b1c57ed8b7b68aa to before af6cfcd0efb7f051af221c418ec8b37a10211947, 39dde65c9940c97fcd178a3d2b1c57ed8b7b68aa to before 9cf5b2a3b72c23fb7b84736d5d19ee6ea718762b, 39dde65c9940c97fcd178a3d2b1c57ed8b7b68aa to before 8a21d5584826f4880f45bbf8f72375f4e6c0ff2a, 39dde65c9940c97fcd178a3d2b1c57ed8b7b68aa to before 081056dc00a27bccb55ccc3c6f230a3d5fd3f7e0
Linux

Linux · 2.6.20
Linux

Component: Not specified by the source
File: include/linux/hugetlb.h, mm/hugetlb.c, mm/vma.c, tools/testing/vma/vma_internal.h

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38085

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38086

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38087

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38089

Affected technology

linux kernel · from 6.3.4 (inclusive), before 6.4 (exclusive)
linux

linux kernel · from 6.4.1 (inclusive), before 6.6.95 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.35 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.4 (exclusive)
linux

linux kernel · 6.4
linux

linux kernel · 6.4 · update rc3
linux

linux kernel · 6.4 · update rc4
linux

linux kernel · 6.4 · update rc5
linux

linux kernel · 6.4 · update rc6
linux

linux kernel · 6.4 · update rc7
linux

linux kernel · 6.16 · update rc1
linux

linux kernel · 6.16 · update rc2
linux

Linux · 29cd2927fb914cc53b5ba4f67d2b74695c994ba4 to before 599c489eea793821232a2f69a00fa57d82b0ac98, 29cd2927fb914cc53b5ba4f67d2b74695c994ba4 to before 353e75b55e583635bf71cde6abcec274dba05edd, 29cd2927fb914cc53b5ba4f67d2b74695c994ba4 to before c90459cd58bb421d275337093d8e901e0ba748dd, 29cd2927fb914cc53b5ba4f67d2b74695c994ba4 to before 94d10a4dba0bc482f2b01e39f06d5513d0f75742, 9b59f5c4911e87264507e0934cd2bb277390c560, 6.3.4 to before 6.4
Linux

Linux · 6.4
Linux

Component: Not specified by the source
File: net/sunrpc/svc.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38090

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38179

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38181

Affected technology

linux kernel · from 4.8 (inclusive), before 5.4.295 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.239 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.186 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.142 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.95 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.35 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.4 (exclusive)
linux

linux kernel · 6.16 · update rc1
linux

linux kernel · 6.16 · update rc2
linux

debian linux · 11.0
debian

Linux · e1adea927080821ebfa7505bff752a4015955660 to before 956f1499412ed0953f6a116df7fdb855e9f1fc66, e1adea927080821ebfa7505bff752a4015955660 to before f4ae0f61dd9a63329ecb49b1e6356139d43240b8, e1adea927080821ebfa7505bff752a4015955660 to before dc724bd34d56f5589f7587a091a8cda2386826c4, e1adea927080821ebfa7505bff752a4015955660 to before 058dd4a370f23a5553a9449f2db53d5bfa88d45e, e1adea927080821ebfa7505bff752a4015955660 to before bde8833eb075ba8e8674de88e32de6b669966451, e1adea927080821ebfa7505bff752a4015955660 to before 988edde4d52d5c02ea4dd95d7619372a5e2fb7b7, e1adea927080821ebfa7505bff752a4015955660 to before d092c7fd8e220b23d6c47e03d7d0cc79e731f379, e1adea927080821ebfa7505bff752a4015955660 to before 10876da918fa1aec0227fb4c67647513447f53a9
Linux

Linux · 4.8
Linux

Component: Not specified by the source
File: net/ipv6/calipso.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38182

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38183

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38184

Affected technology

linux kernel · from 4.9 (inclusive), before 5.4.295 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.239 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.186 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.142 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.95 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.35 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.4 (exclusive)
linux

linux kernel · 6.16 · update rc1
linux

linux kernel · 6.16 · update rc2
linux

debian linux · 11.0
debian

Linux · 832629ca5c313e122b22b8e73a6d80f111b1a1ae to before 3998283e4c32c0fe69edd59b0876c193f50abce6, 832629ca5c313e122b22b8e73a6d80f111b1a1ae to before c2e17984752b9131061d1a2ca1199da2706337fd, 832629ca5c313e122b22b8e73a6d80f111b1a1ae to before 8595350615f952fcf8bc861464a6bf6b1129af50, 832629ca5c313e122b22b8e73a6d80f111b1a1ae to before 05d332ba075753d569d66333d62d60fff5f57ad8, 832629ca5c313e122b22b8e73a6d80f111b1a1ae to before d3dfe821dfe091c0045044343c8d86596d66e2cf, 832629ca5c313e122b22b8e73a6d80f111b1a1ae to before 0d3d91c3500f0c480e016faa4e2259c588616e59, 832629ca5c313e122b22b8e73a6d80f111b1a1ae to before 0f4a72fb266e48dbe928e1d936eab149e4ac3e1b, 832629ca5c313e122b22b8e73a6d80f111b1a1ae to before f82727adcf2992822e12198792af450a76ebd5ef
Linux

Linux · 4.9
Linux

Component: Not specified by the source
File: net/tipc/udp_media.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38186

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38188

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38189

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38191

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38192

Affected technology

linux kernel · from 4.8 (inclusive), before 6.6.95 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.35 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.4 (exclusive)
linux

linux kernel · 6.16 · update rc1
linux

Linux · 6578171a7ff0c31dc73258f93da7407510abf085 to before a046f183d21ab5ace5a96ece4cf9873a42f003a7, 6578171a7ff0c31dc73258f93da7407510abf085 to before 98b1d8dc9a3170b2614f1e8c93854e75cdd83980, 6578171a7ff0c31dc73258f93da7407510abf085 to before bfa4d86e130a09f67607482e988313430e38f6c4, 6578171a7ff0c31dc73258f93da7407510abf085 to before 2a3ad42a57b43145839f2f233fb562247658a6d9, 6578171a7ff0c31dc73258f93da7407510abf085 to before e9994e7b9f7bbb882d13c8191731649249150d21, 6578171a7ff0c31dc73258f93da7407510abf085 to before ba9db6f907ac02215e30128770f85fbd7db2fcf9
Linux

Linux · 4.8
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/core/filter.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38194

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38196

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38197

Affected technology

linux kernel · from 5.7 (inclusive), before 5.10.239 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.186 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.142 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.95 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.35 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.4 (exclusive)
linux

linux kernel · 6.16 · update rc1
linux

linux kernel · 6.16 · update rc2
linux

debian linux · 11.0
debian

Linux · d19f359fbdc6b5d49e9b9a0db27a996b28a2ded3 to before 5e8c658acd1b7c186aeffa46bf08795e121f401a, d19f359fbdc6b5d49e9b9a0db27a996b28a2ded3 to before 07d7b8e7ef7d1f812a6211ed531947c56d09e95e, d19f359fbdc6b5d49e9b9a0db27a996b28a2ded3 to before a7b477b64ef5e37cb08dd536ae07c46f9f28262e, d19f359fbdc6b5d49e9b9a0db27a996b28a2ded3 to before f3b840fb1508a80cd8a0efb5c886ae1995a88b24, d19f359fbdc6b5d49e9b9a0db27a996b28a2ded3 to before 4d71f2c1e5263a9f042faa71d59515709869dc79, d19f359fbdc6b5d49e9b9a0db27a996b28a2ded3 to before 32d05e6cc3a7bf6c8f16f7b7ef8fe80eca0c233e, d19f359fbdc6b5d49e9b9a0db27a996b28a2ded3 to before 61ce04601e0d8265ec6d2ffa6df5a7e1bce64854
Linux

Linux · 5.7
Linux

Component: Not specified by the source
File: drivers/platform/x86/dell/dell_rbu.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.3/10) rates confidentiality and availability impact as high; integrity impact as low. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38198

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38199

Affected technology

linux kernel · from 6.3 (inclusive), before 6.15.4 (exclusive)
linux

Linux · d889913205cf7ebda905b1e62c5867ed4e39f6c2 to before 2c4b122c75581331177686f68a08981371147d37, d889913205cf7ebda905b1e62c5867ed4e39f6c2 to before 232f962ae5fca98912a719e64b4964a5aec7c99b, d889913205cf7ebda905b1e62c5867ed4e39f6c2 to before c426497fa2055c8005196922e7d29c41d7e0948a
Linux

Linux · 6.3
Linux

Component: Not specified by the source
File: drivers/net/wireless/ath/ath12k/mac.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38200

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38201

Affected technology

linux kernel · from 5.6 (inclusive), before 6.12.35 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.4 (exclusive)
linux

Linux · 3c4287f62044a90e73a561aa05fc46e62da173da to before 1fe27f97944017a9d3c5af4d6d95282bff0f1147, 3c4287f62044a90e73a561aa05fc46e62da173da to before 4abccfb61f422300be014b8e734c63344306f009, 3c4287f62044a90e73a561aa05fc46e62da173da to before 80417057ac60dd80f4816eb426e4e4a5bf696534, 3c4287f62044a90e73a561aa05fc46e62da173da to before df524a68d9021c1401965d610bb6e42ee5d9611e, 3c4287f62044a90e73a561aa05fc46e62da173da to before 0ab3de047808f375a36cd345225572eb3366f3c6, 3c4287f62044a90e73a561aa05fc46e62da173da to before d2768016f091f8a5264076b433fd7c3fabb6eb97, 3c4287f62044a90e73a561aa05fc46e62da173da to before b85e3367a5716ed3662a4fe266525190d2af76df
Linux

Linux · 5.6
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/netfilter/nft_set_pipapo.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38202

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38203

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38204

Affected technology

linux kernel · before 5.4.295 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.239 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.186 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.15.4 (exclusive)
linux

debian linux · 11.0
debian

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 81af4b34fd72d390d7f237c6a545cc6d09707956, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before bfa4655d28f338e68d345aed80d19be7999bbce2, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 44618bee303bed151ef3a525ff79fbd7689593b5, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c8733634978086b41255695d993cec3017a23a27, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2ec34dc7094b14149ce091c77aff43a45d255518, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c8399564a58fb6ea2ff21a6fd278417943cb51a5, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 5dff41a86377563f7a2b968aae00d25b4ceb37c9
Linux

Linux · 2.6.12
Linux

Component: Not specified by the source
File: fs/jfs/jfs_dtree.c

Attack conditions (Source advisory, CVSS 3.1): Local · No privileges required · User interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38205

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38206

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38208

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38210

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38211

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38212

Affected technology

linux kernel · from 3.1 (inclusive), before 5.4.295 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.239 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.186 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.142 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.95 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.35 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.4 (exclusive)
linux

debian linux · 11.0
debian

Linux · b34a6b1da371ed8af1221459a18c67970f7e3d53 to before 5f1e1573bf103303944fd7225559de5d8297539c, b34a6b1da371ed8af1221459a18c67970f7e3d53 to before b968ba8bfd9f90914957bbbd815413bf6a98eca7, b34a6b1da371ed8af1221459a18c67970f7e3d53 to before 74bc813d11c30e28fc5261dc877cca662ccfac68, b34a6b1da371ed8af1221459a18c67970f7e3d53 to before 78297d53d3878d43c1d627d20cd09f611fa4b91d, b34a6b1da371ed8af1221459a18c67970f7e3d53 to before 5180561afff8e0f029073c8c8117c95c6512d1f9, b34a6b1da371ed8af1221459a18c67970f7e3d53 to before 68c173ea138b66d7dd1fd980c9bc578a18e11884, b34a6b1da371ed8af1221459a18c67970f7e3d53 to before b0b6bf90ce2699a574b3683e22c44d0dcdd7a057, b34a6b1da371ed8af1221459a18c67970f7e3d53 to before d66adabe91803ef34a8b90613c81267b5ded1472
Linux

Linux · 3.1
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

Component: Not specified by the source
File: ipc/shm.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38217

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38218

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38219

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38220

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38222

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38223

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38224

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38225

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38226

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38227

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38228

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38229

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38231

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38232

Affected technology

linux kernel · before 6.12.35 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.4 (exclusive)
linux

Linux · bd5ae9288d6451bd346a1b4a59d4fe7e62ba29b7 to before 49b57b98fa601ae6cc7897bab4515129da8290f7, bd5ae9288d6451bd346a1b4a59d4fe7e62ba29b7 to before 88d6785c173a7c4de05bef8c4fd8a9b42ead02d5, bd5ae9288d6451bd346a1b4a59d4fe7e62ba29b7 to before 8120e420013d947c890f358f30a2d98ba8ac20bc, bd5ae9288d6451bd346a1b4a59d4fe7e62ba29b7 to before 2029ca75cdfa6a25716a5a76b751486cce7e3822, bd5ae9288d6451bd346a1b4a59d4fe7e62ba29b7 to before 327011a2bb4f7de9c72b891a96ce8d902828bddf, bd5ae9288d6451bd346a1b4a59d4fe7e62ba29b7 to before f7fb730cac9aafda8b9813b55d04e28a9664d17c, 8677e99150b0830d29cc1318b4cc559e176940bb, 7c7cb07d4affcf41749234fe9dc4d90cd3959e32, 4d41f65efeec0a6da6088341203c81e49ebfcd90, 5.4.102 to before 5.5, 5.10.20 to before 5.11, 5.11.3 to before 5.12
Linux

Linux · 5.12
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: fs/nfsd/nfsctl.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38233

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38234

Affected technology

linux kernel · before 6.15.4 (exclusive)
linux

Linux · e8fa136262e1121288bb93befe2295928ffd240d to before 9f6022b2573ae068793810db719e131df3ded405, e8fa136262e1121288bb93befe2295928ffd240d to before debfbc047196df1f6bfd52f2d028c21dce67f0de, e8fa136262e1121288bb93befe2295928ffd240d to before 07ecabfbca64f4f0b6071cf96e49d162fa9d138d, e8fa136262e1121288bb93befe2295928ffd240d to before 690e47d1403e90b7f2366f03b52ed3304194c793
Linux

Linux · 2.6.25
Linux

Component: Not specified by the source
File: kernel/sched/rt.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38236

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38237

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38238

Affected technology

linux kernel · from 6.14 (inclusive), before 6.15.5 (exclusive)
linux

linux kernel · 6.16 · update rc1
linux

linux kernel · 6.16 · update rc2
linux

linux kernel · 6.16 · update rc3
linux

Linux · 09c1e6ab4ab2a107d96f119950dc330e446dc2b0 to before 09679e9abedfbc5a2590759a1a7893c1c26e6044, 09c1e6ab4ab2a107d96f119950dc330e446dc2b0 to before a35b29bdedb4d2ae3160d4d6684a6f1ecd9ca7c2
Linux

Linux · 6.14
Linux

Component: Not specified by the source
File: drivers/scsi/fnic/fdls_disc.c, drivers/scsi/fnic/fnic.h, drivers/scsi/fnic/fnic_fdls.h

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38239

Affected technology

linux kernel · from 5.17 (inclusive), before 6.1.143 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.96 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.36 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.5 (exclusive)
linux

linux kernel · 6.16 · update rc1
linux

linux kernel · 6.16 · update rc2
linux

linux kernel · 6.16 · update rc3
linux

debian linux · 11.0
debian

Linux · 8049da6f3943d0ac51931b8064b2e4769a69a967 to before f1064b3532192e987ab17be7281d5fee36fd25e1, 8049da6f3943d0ac51931b8064b2e4769a69a967 to before bf2c1643abc3b2507d56bb6c22bf9897272f8a35, 8049da6f3943d0ac51931b8064b2e4769a69a967 to before 19a47c966deb36624843b7301f0373a3dc541a05, 8049da6f3943d0ac51931b8064b2e4769a69a967 to before 074efb35552556a4b3b25eedab076d5dc24a8199, 8049da6f3943d0ac51931b8064b2e4769a69a967 to before 752eb816b55adb0673727ba0ed96609a17895654
Linux

Linux · 5.17
Linux

Component: Not specified by the source
File: drivers/scsi/megaraid/megaraid_sas_base.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.3/10) rates confidentiality and availability impact as high; integrity impact as low. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38241

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38242

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38244

Affected technology

linux kernel · from 6.0 (inclusive), before 6.6.96 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.36 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.5 (exclusive)
linux

linux kernel · 6.16 · update rc1
linux

linux kernel · 6.16 · update rc2
linux

linux kernel · 6.16 · update rc3
linux

Linux · d7d7a66aacd6fd8ca57baf08a7bac5421282f6f8 to before c82c7041258d96e3286f6790ab700e4edd3cc9e3, d7d7a66aacd6fd8ca57baf08a7bac5421282f6f8 to before 7f3ead8ebc0ef65b6c89a13912b4e80218425629, d7d7a66aacd6fd8ca57baf08a7bac5421282f6f8 to before fe035dc78aa6ca8f862857d45beaf7a0e03206ca, d7d7a66aacd6fd8ca57baf08a7bac5421282f6f8 to before 711741f94ac3cf9f4e3aa73aa171e76d188c0819
Linux

Linux · 6.0
Linux

Component: Not specified by the source
File: fs/smb/client/cifsglob.h, fs/smb/client/connect.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38245

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38246

Affected technology

linux kernel · from 5.19 (inclusive), before 6.6.97 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.36 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.5 (exclusive)
linux

linux kernel · 6.16 · update rc1
linux

linux kernel · 6.16 · update rc2
linux

linux kernel · 6.16 · update rc3
linux

Linux · a7559bc8c17c3f9a91dcbeefe8642ba757fd09e8 to before 16254aa985d14dee050564c4a3936f3dc096e1f7, a7559bc8c17c3f9a91dcbeefe8642ba757fd09e8 to before c6665b8f0f58082c480ed8627029f44d046ef2c8, a7559bc8c17c3f9a91dcbeefe8642ba757fd09e8 to before 02bf488d56df9db4f5147280b65d9011e1ab88d2, a7559bc8c17c3f9a91dcbeefe8642ba757fd09e8 to before 9caca6ac0e26cd20efd490d8b3b2ffb1c7c00f6f
Linux

Linux · 5.19
Linux

Component: Not specified by the source
File: drivers/net/ethernet/broadcom/bnxt/bnxt.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38248

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38249

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38250

Affected technology

linux kernel · from 3.4 (inclusive), before 6.6.97 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.36 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.5 (exclusive)
linux

linux kernel · 6.16 · update rc1
linux

linux kernel · 6.16 · update rc2
linux

linux kernel · 6.16 · update rc3
linux

Linux · bf18c7118cf83ad4b9aa476354b4a06bcb9d0c4f to before dd4becd3fd4102696e1c15e6d260a1712a2d8685, bf18c7118cf83ad4b9aa476354b4a06bcb9d0c4f to before 90dee0a0ff84fac8accd5be98412b3819f667149, bf18c7118cf83ad4b9aa476354b4a06bcb9d0c4f to before c56b177efce8b62798e4d96bdb9867106cb7c4a0, bf18c7118cf83ad4b9aa476354b4a06bcb9d0c4f to before bc0819a25e04cd68ef3568cfa51b63118fea39a7, bf18c7118cf83ad4b9aa476354b4a06bcb9d0c4f to before ce23b73f0f27e2dbeb81734a79db710f05aa33c6, bf18c7118cf83ad4b9aa476354b4a06bcb9d0c4f to before 0e5c144c557df910ab64d9c25d06399a9a735e65, bf18c7118cf83ad4b9aa476354b4a06bcb9d0c4f to before 1d6123102e9fbedc8d25bf4731da6d513173e49e
Linux

Linux · 3.4
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
File: include/net/bluetooth/hci_core.h, net/bluetooth/hci_core.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38251

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38253

Affected technology

linux kernel · from 6.8 (inclusive), before 6.12.36 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.5 (exclusive)
linux

linux kernel · 6.16 · update rc1
linux

linux kernel · 6.16 · update rc2
linux

linux kernel · 6.16 · update rc3
linux

Linux · fd2a9b29dc9c4c35def91d5d1c5b470843539de6 to before a4f182ffa30c52ad1c8e12edfb8049ee748c0f1b, fd2a9b29dc9c4c35def91d5d1c5b470843539de6 to before 57a3d82200dbeccd002244b96acad570eeeb731f, fd2a9b29dc9c4c35def91d5d1c5b470843539de6 to before f3054152c12e2eed1e72704aff47b0ea58229584
Linux

Linux · 6.8
Linux

Component: Not specified by the source
File: drivers/hid/wacom_sys.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38254

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38255

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38256

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38257

Affected technology

linux kernel · from 5.4 (inclusive), before 5.15.187 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.143 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.96 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.36 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.5 (exclusive)
linux

linux kernel · 6.16 · update rc1
linux

linux kernel · 6.16 · update rc2
linux

linux kernel · 6.16 · update rc3
linux

debian linux · 11.0
debian

Linux · f2bbc96e7cfad3891b7bf9bd3e566b9b7ab4553d to before ad1bdd24a02d5a8d119af8e4cd50933780a6d29f, f2bbc96e7cfad3891b7bf9bd3e566b9b7ab4553d to before faa1ab4a23c42e34dc000ef4977b751d94d5148c, f2bbc96e7cfad3891b7bf9bd3e566b9b7ab4553d to before 88f3869649edbc4a13f6c2877091f81cd5a50f05, f2bbc96e7cfad3891b7bf9bd3e566b9b7ab4553d to before f855b119e62b004a5044ed565f2a2b368c4d3f16, f2bbc96e7cfad3891b7bf9bd3e566b9b7ab4553d to before 73483ca7e07a5e39bdf612eec9d3d293e8bef649, f2bbc96e7cfad3891b7bf9bd3e566b9b7ab4553d to before 7360ee47599af91a1d5f4e74d635d9408a54e489
Linux

Linux · 5.4
Linux

Component: Not specified by the source
File: drivers/s390/crypto/pkey_api.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.3/10) rates confidentiality and availability impact as high; integrity impact as low. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38258

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38259

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38260

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38261

Affected technology

linux kernel · from 4.15 (inclusive), before 6.15.5 (exclusive)
linux

Linux · 76d2a0493a17d4c8ecc781366850c3c4f8e1a446 to before 1b63cdc0d63ae33522b4714642fbefa298acc274, 76d2a0493a17d4c8ecc781366850c3c4f8e1a446 to before 9e7005c3638134df5b7df467c1d884a2482c77cb, 76d2a0493a17d4c8ecc781366850c3c4f8e1a446 to before 69ea599a8dab93a620c92c255be4239a06290a77, 76d2a0493a17d4c8ecc781366850c3c4f8e1a446 to before 788aa64c01f1262310b4c1fb827a36df170d86ea
Linux

Linux · 4.15
Linux

Component: Not specified by the source
File: arch/riscv/include/asm/processor.h, arch/riscv/kernel/asm-offsets.c, arch/riscv/kernel/entry.S

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38262

Affected technology

linux kernel · from 2.6.20 (inclusive), before 5.4.296 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.15.187 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.143 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.96 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.36 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.5 (exclusive)
linux

debian linux · 11.0
debian

Linux · 238b8721a554a33a451a3f13bdb5be8fe5cfc927 to before 5015eed450005bab6e5cb6810f7a62eab0434fc4, 238b8721a554a33a451a3f13bdb5be8fe5cfc927 to before 9c905fdbba68a6d73d39a6b7de9b9f0d6c46df87, 238b8721a554a33a451a3f13bdb5be8fe5cfc927 to before 6db06aaea07bb7c8e33a425cf7b98bf29ee6056e, 238b8721a554a33a451a3f13bdb5be8fe5cfc927 to before 8e958d10dd0ce5ae674cce460db5c9ca3f25243b, 238b8721a554a33a451a3f13bdb5be8fe5cfc927 to before 685d29f2c5057b32c7b1b46f2a7d303b926c8f72, 238b8721a554a33a451a3f13bdb5be8fe5cfc927 to before f5e4229d94792b40e750f30c92bcf7a3107c72ef, 238b8721a554a33a451a3f13bdb5be8fe5cfc927 to before 6bd697b5fc39fd24e2aa418c7b7d14469f550a93
Linux

Linux · 2.6.20
Linux

Component: Not specified by the source
Function: is
File: drivers/tty/serial/uartlite.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38263

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38264

Affected technology

linux kernel · from 5.0 (inclusive), before 6.12.36 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.5 (exclusive)
linux

Linux · 3f2304f8c6d6ed97849057bd16fee99e434ca796 to before 8f27d152b2a59f443091cf9e3d815f06e32e9b96, 3f2304f8c6d6ed97849057bd16fee99e434ca796 to before 78a4adcd3fedb0728436e8094848ebf4c6bae006, 3f2304f8c6d6ed97849057bd16fee99e434ca796 to before f054ea62598197714a6ca7b3b387a027308f8b13, 3f2304f8c6d6ed97849057bd16fee99e434ca796 to before 0bf04c874fcb1ae46a863034296e4b33d8fbd66c
Linux

Linux · 5.0
Linux

Component: Not specified by the source
File: drivers/nvme/host/tcp.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38320

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38321

Affected technology

linux kernel · before 6.6.95 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.35 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.4 (exclusive)
linux

linux kernel · 6.16 · update rc1
linux

linux kernel · 6.16 · update rc2
linux

Linux · 73934e535cffbda1490fa97d82690a0f9aa73e94 to before b8ced2b9a23a1a2c1e0ed8d0d02512e51bdf38da, 548812afd96982a76a93ba76c0582ea670c40d9e to before 43f26094d6702e494e800532c3f1606e7a68eb30, 3fa640d035e5ae526769615c35cb9ed4be6e3662 to before 4479db143390bdcadc1561292aab579cdfa9f6c6, 3fa640d035e5ae526769615c35cb9ed4be6e3662 to before a2182743a8b4969481f64aec4908ff162e8a206c, ff4528bbc82d0d90073751f7b49e7b9e9c7e5638, 6.6.64 to before 6.6.95, 6.12.2 to before 6.12.35, 6.11.11 to before 6.12
Linux

Linux · 6.13
Linux

Component: Not specified by the source
File: fs/smb/client/cached_dir.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38322

Affected technology

linux kernel · from 6.1.134 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.6.87 (inclusive), before 6.6.101 (exclusive)
linux

linux kernel · from 6.12.23 (inclusive), before 6.12.49 (exclusive)
linux

linux kernel · from 6.13.11 (inclusive), before 6.14 (exclusive)
linux

linux kernel · from 6.14.2 (inclusive), before 6.15.4 (exclusive)
linux

linux kernel · 6.16 · update rc1
linux

linux kernel · 6.16 · update rc2
linux

debian linux · 11.0
debian

Linux · 781b2db0eb7731fbde510c268b7ccc62959c3feb to before 702ea6028032d6c1fe96c2d4762a3575e3654819, e7f6922c8a5b41522a8329ea6bbf815993b2dd28 to before 79e2dd573116d3338507c311460da9669095c94d, 3a8bec6583e5239de3bd597ab382dc6c2b0c29a1 to before e97c45c770f5e56c784a46c2a96ab968d26b97d9, f9bdf1f953392c9edd69a7f884f78c0390127029 to before a85cc69acdcb05f8cd226b8ea0778b8e2e887e6f, f9bdf1f953392c9edd69a7f884f78c0390127029 to before b0823d5fbacb1c551d793cbfe7af24e0d1fa45ed, 06cd7bfbb86e9db3e9013ea6636ad2c6f0a1664d, d8370aa704bd7e384918c8f466856374725c0585, 6.1.134 to before 6.1.149, 6.6.87 to before 6.6.101, 6.12.23 to before 6.12.49, 6.13.11 to before 6.14, 6.14.2 to before 6.15
Linux

Linux · 6.15
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
Function: is
File: arch/x86/events/intel/core.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38324

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38325

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38326

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38328

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38329

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38330

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38331

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38332

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38333

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38334

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38336

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38337

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38338

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38339

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38340

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38341

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38342

Affected technology

linux kernel · from 5.0 (inclusive), before 5.10.239 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.186 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.142 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.95 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.35 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.4 (exclusive)
linux

debian linux · 11.0
debian

Linux · 59abd83672f70cac4b6bf9b237506c5bc6837606 to before 142acd739eb6f08c148a96ae8309256f1422ff4b, 59abd83672f70cac4b6bf9b237506c5bc6837606 to before 56ce76e8d406cc72b89aee7931df5cf3f18db49d, 59abd83672f70cac4b6bf9b237506c5bc6837606 to before 9324127b07dde8529222dc19233aa57ec810856c, 59abd83672f70cac4b6bf9b237506c5bc6837606 to before f9397cf7bfb680799fb8c7f717c8f756384c3280, 59abd83672f70cac4b6bf9b237506c5bc6837606 to before 4b3383110b6df48e0ba5936af2cb68d5eb6bd43b, 59abd83672f70cac4b6bf9b237506c5bc6837606 to before 7af18e42bdefe1dba5bcb32555a4d524fd504939, 59abd83672f70cac4b6bf9b237506c5bc6837606 to before 31e4e12e0e9609850cefd4b2e1adf782f56337d6
Linux

Linux · 5.0
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

Component: Not specified by the source
File: drivers/base/swnode.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38343

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38344

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38345

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38346

Affected technology

linux kernel · from 4.15 (inclusive), before 5.4.295 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.239 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.186 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.142 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.95 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.35 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.4 (exclusive)
linux

debian linux · 11.0
debian

Linux · aba4b5c22cbac296f4081a0476d0c55828f135b4 to before d064c68781c19f378af1ae741d9132d35d24b2bb, aba4b5c22cbac296f4081a0476d0c55828f135b4 to before 8690cd3258455bbae64f809e1d3ee0f043661c71, aba4b5c22cbac296f4081a0476d0c55828f135b4 to before 6805582abb720681dd1c87ff677f155dcf4e86c9, aba4b5c22cbac296f4081a0476d0c55828f135b4 to before 03a162933c4a03b9f1a84f7d8482903c7e1e11bb, aba4b5c22cbac296f4081a0476d0c55828f135b4 to before 83a692a9792aa86249d68a8ac0b9d55ecdd255fa, aba4b5c22cbac296f4081a0476d0c55828f135b4 to before 8e89c17dc8970c5f71a3a991f5724d4c8de42d8c, aba4b5c22cbac296f4081a0476d0c55828f135b4 to before f78a786ad9a5443a29eef4dae60cde85b7375129, aba4b5c22cbac296f4081a0476d0c55828f135b4 to before f914b52c379c12288b7623bb814d0508dbe7481d
Linux

Linux · 4.15
Linux

Component: Not specified by the source
Function: tracing, trace, names
File: kernel/trace/ftrace.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38347

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38348

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38353

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38354

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38355

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38356

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38359

Affected technology

linux kernel · before 6.15.5 (exclusive)
linux

Linux · 084ea4d611a3d00ee3930400b262240e10895900 to before 9bcfbd58fc5a02777fed3e582f22503ef3289a43, 084ea4d611a3d00ee3930400b262240e10895900 to before 7aee3e5163cade3f4cf1cc0710dfbadb47f1ba84, 084ea4d611a3d00ee3930400b262240e10895900 to before d2e317dfd2d1fe416c77315d17c5d57dbe374915, 084ea4d611a3d00ee3930400b262240e10895900 to before 11709abccf93b08adde95ef313c300b0d4bc28f1
Linux

Linux · 5.7
Linux

Component: Not specified by the source
Function: called
File: arch/s390/mm/fault.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38360

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38361

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38362

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38363

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38364

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38365

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38368

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38369

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38370

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38371

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38372

Affected technology

linux kernel · from 6.12.13 (inclusive), before 6.12.37 (exclusive)
linux

linux kernel · from 6.13.2 (inclusive), before 6.15.6 (exclusive)
linux

linux kernel · 6.16 · update rc1
linux

linux kernel · 6.16 · update rc2
linux

linux kernel · 6.16 · update rc3
linux

linux kernel · 6.16 · update rc4
linux

Linux · 7cc8f681f6d4ae4478ae0f60485fc768f2b450da to before 9d2ef890e49963b768d4fe5a33029aacd9f6b93f, d3d930411ce390e532470194296658a960887773 to before ebebffb47c78f63ba7e4fbde393e44af38b7625d, d3d930411ce390e532470194296658a960887773 to before 2c6b640ea08bff1a192bf87fa45246ff1e40767c, a306dfff6b76aafa264ad33874a8992a8d5858b7, edfb65dbb9ffd3102f3ff4dd21316158e56f1976, 6.12.13 to before 6.12.37, 6.6.160 to before 6.7, 6.13.2 to before 6.14
Linux

Linux · 6.14
Linux

Component: Not specified by the source
File: drivers/infiniband/hw/mlx5/odp.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38373

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38374

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38375

Affected technology

linux kernel · from 4.14 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.189 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.144 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.97 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.37 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.6 (exclusive)
linux

linux kernel · 6.16 · update rc1
linux

linux kernel · 6.16 · update rc2
linux

linux kernel · 6.16 · update rc3
linux

linux kernel · 6.16 · update rc4
linux

debian linux · 11.0
debian

Linux · 4941d472bf95b4345d6e38906fcf354e74afa311 to before 773e95c268b5d859f51f7547559734fd2a57660c, 4941d472bf95b4345d6e38906fcf354e74afa311 to before ddc8649d363141fb3371dd81a73e1cb4ef8ed1e1, 4941d472bf95b4345d6e38906fcf354e74afa311 to before 982beb7582c193544eb9c6083937ec5ac1c9d651, 4941d472bf95b4345d6e38906fcf354e74afa311 to before 6aca3dad2145e864dfe4d1060f45eb1bac75dd58, 4941d472bf95b4345d6e38906fcf354e74afa311 to before 80b971be4c37a4d23a7f1abc5ff33dc7733d649b, 4941d472bf95b4345d6e38906fcf354e74afa311 to before bc68bc3563344ccdc57d1961457cdeecab8f81ef, 4941d472bf95b4345d6e38906fcf354e74afa311 to before 11f2d0e8be2b5e784ac45fa3da226492c3e506d8, 4941d472bf95b4345d6e38906fcf354e74afa311 to before 315dbdd7cdf6aa533829774caaf4d25f1fd20e73
Linux

Linux · 4.14
Linux

Component: Not specified by the source
File: drivers/net/virtio_net.c

Attack conditions (Source advisory, CVSS 3.1): Local · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.4/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38376

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38377

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38381

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38382

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38383

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38384

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38385

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38386

Affected technology

linux kernel · before 5.4.296 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.240 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.187 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.144 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.97 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.37 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.6 (exclusive)
linux

linux kernel · 6.16 · update rc1
linux

linux kernel · 6.16 · update rc2
linux

debian linux · 11.0
debian

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b49d224d1830c46e20adce2a239c454cdab426f1, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2219e49857ffd6aea1b1ca5214d3270f84623a16, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ab1e8491c19eb2ea0fda81ef28e841c7cb6399f5, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 4305d936abde795c2ef6ba916de8f00a50f64d2d, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d547779e72cea9865b732cd45393c4cd02b3598e, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 18ff4ed6a33a7e3f2097710eacc96bea7696e803, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c9e4da550ae196132b990bd77ed3d8f2d9747f87, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6fcab2791543924d438e7fa49276d0998b0a069f
Linux

Linux · 2.6.12
Linux

Component: Not specified by the source
File: drivers/acpi/acpica/dsmethod.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38387

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38388

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38389

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38390

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38391

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38392

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38393

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38395

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38396

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38399

Affected technology

linux kernel · from 5.9 (inclusive), before 5.10.240 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.187 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.144 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.97 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.37 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.6 (exclusive)
linux

linux kernel · 6.16 · update rc1
linux

linux kernel · 6.16 · update rc2
linux

debian linux · 11.0
debian

Linux · f32ba612ef0f8eecaf6d2a5b04076ee7ea9ed039 to before 70ddb8133fdb512d4b1f2b4fd1c9e518514f182c, f32ba612ef0f8eecaf6d2a5b04076ee7ea9ed039 to before 1129e0e0a833acf90429e0f13951068d5f026e4f, f32ba612ef0f8eecaf6d2a5b04076ee7ea9ed039 to before 1627dda4d70ceb1ba62af2e401af73c09abb1eb5, f32ba612ef0f8eecaf6d2a5b04076ee7ea9ed039 to before 55dfffc5e94730370b08de02c0cf3b7c951bbe9e, f32ba612ef0f8eecaf6d2a5b04076ee7ea9ed039 to before 7296c938df2445f342be456a6ff0b3931d97f4e5, f32ba612ef0f8eecaf6d2a5b04076ee7ea9ed039 to before c412185d557578d3f936537ed639c4ffaaed4075, f32ba612ef0f8eecaf6d2a5b04076ee7ea9ed039 to before d8ab68bdb294b09a761e967dad374f2965e1913f
Linux

Linux · 5.9
Linux

Component: Not specified by the source
Function: core_scsi3_decode_spec_i_port
File: drivers/target/target_core_pr.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38400

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38401

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38402

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38403

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38405

Affected technology

linux kernel · from 6.10.10 (inclusive), before 6.12.37 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.6 (exclusive)
linux

linux kernel · 6.16 · update rc1
linux

linux kernel · 6.16 · update rc2
linux

linux kernel · 6.16 · update rc3
linux

linux kernel · 6.16 · update rc4
linux

Linux · bf4c89fc8797f5c0964a0c3d561fbe7e8483b62f to before 431e58d56fcb5ff1f9eb630724a922e0d2a941df, bf4c89fc8797f5c0964a0c3d561fbe7e8483b62f to before 2e2028fcf924d1c6df017033c8d6e28b735a0508, bf4c89fc8797f5c0964a0c3d561fbe7e8483b62f to before 190f4c2c863af7cc5bb354b70e0805f06419c038, 64149da0fddbbfe43e11c0348d8c8b4171dae3a2, 6.10.10 to before 6.11
Linux

Linux · 6.11
Linux

Component: Not specified by the source
File: drivers/nvme/target/nvmet.h

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38406

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38407

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38408

Affected technology

linux kernel · from 5.8 (inclusive), before 6.12.37 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.6 (exclusive)
linux

linux kernel · 6.16 · update rc1
linux

linux kernel · 6.16 · update rc2
linux

Linux · 337cbeb2c13eb4cab84f576fd402d7ae4ed31ae1 to before 186df821de0f34490ed5fc0861243748b2483861, 337cbeb2c13eb4cab84f576fd402d7ae4ed31ae1 to before c71aa4bb528ae6f8fd7577a0a39e5a03c60b04fb, 337cbeb2c13eb4cab84f576fd402d7ae4ed31ae1 to before ec3656a8cb428d763def32bc2fa695f94be23629, 337cbeb2c13eb4cab84f576fd402d7ae4ed31ae1 to before 19bd7597858dd15802c1d99fcc38e528f469080a, 337cbeb2c13eb4cab84f576fd402d7ae4ed31ae1 to before 7f73d1def72532bac4d55ea8838f457a6bed955c, 337cbeb2c13eb4cab84f576fd402d7ae4ed31ae1 to before 8a2277a3c9e4cc5398f80821afe7ecbe9bdf2819
Linux

Linux · 5.8
Linux

Component: Not specified by the source
File: kernel/irq/irq_sim.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38409

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38410

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38411

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38412

Affected technology

linux kernel · from 5.11 (inclusive), before 5.15.187 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.144 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.97 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.37 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.6 (exclusive)
linux

linux kernel · 6.16 · update rc1
linux

linux kernel · 6.16 · update rc2
linux

linux kernel · 6.16 · update rc3
linux

linux kernel · 6.16 · update rc4
linux

debian linux · 11.0
debian

Linux · e8a60aa7404bfef37705da5607c97737073ac38d to before 92c2d914b5337431d885597a79a3a3d9d55e80b7, e8a60aa7404bfef37705da5607c97737073ac38d to before 68e9963583d11963ceca5d276e9c44684509f759, e8a60aa7404bfef37705da5607c97737073ac38d to before 0deb3eb78ebf225cb41aa9b2b2150f46cbfd359e, e8a60aa7404bfef37705da5607c97737073ac38d to before 5df3b870bc389a1767c72448a3ce1c576ef4deab, e8a60aa7404bfef37705da5607c97737073ac38d to before aaf847dcb4114fe8b25d4c1c790bedcb6088cb3d, e8a60aa7404bfef37705da5607c97737073ac38d to before eb617dd25ca176f3fee24f873f0fd60010773d67
Linux

Linux · 5.11
Linux

Component: Not specified by the source
File: drivers/platform/x86/dell/dell-wmi-sysman/dell-wmi-sysman.h, drivers/platform/x86/dell/dell-wmi-sysman/enum-attributes.c, drivers/platform/x86/dell/dell-wmi-sysman/int-attributes.c, drivers/platform/x86/dell/dell-wmi-sysman/passobj-attributes.c, drivers/platform/x86/dell/dell-wmi-sysman/string-attributes.c, drivers/platform/x86/dell/dell-wmi-sysman/sysman.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38413

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38416

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38417

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38418

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38419

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38420

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38421

Affected technology

linux kernel · from 6.12.23 (inclusive), before 6.13 (exclusive)
linux

linux kernel · from 6.13.11 (inclusive), before 6.14 (exclusive)
linux

linux kernel · from 6.14.1 (inclusive), before 6.15.4 (exclusive)
linux

linux kernel · 6.14
linux

linux kernel · 6.14 · update rc7
linux

linux kernel · 6.16 · update rc1
linux

linux kernel · 6.16 · update rc2
linux

Linux · e70b4b8f93d7fcf8ee063a1d1f18782c4da3d335 to before d6a38e1a82d2f9abd0bae84a354654bccb8389f6, 5b1122fc4995f308b21d7cfc64ef9880ac834d20 to before 0d10b532f861253c283863522d59d099fcb0796d, 5b1122fc4995f308b21d7cfc64ef9880ac834d20 to before d9db3a941270d92bbd1a6a6b54a10324484f2f2d, 3ed60e51ffdbfef14169bd967e21a6ba5e5ff42b, 6.12.23 to before 6.12.114, 6.13.11 to before 6.14
Linux

Linux · 6.14
Linux

Component: Not specified by the source
File: drivers/platform/x86/amd/pmf/core.c, drivers/platform/x86/amd/pmf/tee-if.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38422

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38423

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38424

Affected technology

linux kernel · from 3.7 (inclusive), before 5.4.295 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.239 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.186 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.142 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.95 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.35 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.4 (exclusive)
linux

linux kernel · 6.16 · update rc1
linux

linux kernel · 6.16 · update rc2
linux

debian linux · 11.0
debian

Linux · c5ebcedb566ef17bda7b02686e0d658a7bb42ee7 to before 7b8f3c72175c6a63a95cf2e219f8b78e2baad34e, c5ebcedb566ef17bda7b02686e0d658a7bb42ee7 to before 507c9a595bad3abd107c6a8857d7fd125d89f386, c5ebcedb566ef17bda7b02686e0d658a7bb42ee7 to before a9f6aab7910a0ef2895797f15c947f6d1053160f, c5ebcedb566ef17bda7b02686e0d658a7bb42ee7 to before 975ffddfa2e19823c719459d2364fcaa17673964, c5ebcedb566ef17bda7b02686e0d658a7bb42ee7 to before 2ee6044a693735396bb47eeaba1ac3ae26c1c99b, c5ebcedb566ef17bda7b02686e0d658a7bb42ee7 to before 456019adaa2f5366b89c868dea9b483179bece54, c5ebcedb566ef17bda7b02686e0d658a7bb42ee7 to before 7311970d07c4606362081250da95f2c7901fc0db, c5ebcedb566ef17bda7b02686e0d658a7bb42ee7 to before 4f6fc782128355931527cefe3eb45338abd8ab39
Linux

Linux · 3.7
Linux

Component: Not specified by the source
File: kernel/events/core.c, kernel/exit.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38425

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38426

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38427

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38428

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38429

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38430

Affected technology

linux kernel · before 5.4.295 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.239 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.186 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.142 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.95 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.35 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.4 (exclusive)
linux

debian linux · 11.0
debian

Linux · ed94164398c935a42be7b129a478eb19c598b68a to before bf78a2706ce975981eb5167f2d3b609eb5d24c19, ed94164398c935a42be7b129a478eb19c598b68a to before b1d0323a09a29f81572c7391e0d80d78724729c9, ed94164398c935a42be7b129a478eb19c598b68a to before 425efc6b3292a3c79bfee4a1661cf043dcd9cf2f, ed94164398c935a42be7b129a478eb19c598b68a to before 64a723b0281ecaa59d31aad73ef8e408a84cb603, ed94164398c935a42be7b129a478eb19c598b68a to before e7e943ddd1c6731812357a28e7954ade3a7d8517, ed94164398c935a42be7b129a478eb19c598b68a to before 7a75a956692aa64211a9e95781af1ec461642de4, ed94164398c935a42be7b129a478eb19c598b68a to before 2c54bd5a380ebf646fb9efbc4ae782ff3a83a5af, ed94164398c935a42be7b129a478eb19c598b68a to before 1244f0b2c3cecd3f349a877006e67c9492b41807
Linux

Linux · 4.8
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

Component: Not specified by the source
File: fs/nfsd/nfs4proc.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38431

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38434

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38435

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38436

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38523

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38541

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-39682

Affected technology

linux kernel · from 6.0 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.44 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.4 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

debian linux · 11.0
debian

simatic cn 4100 firmware · before 5.0 (exclusive)
siemens

Linux · 84c61fe1a75b4255df1e1e7c054c9e6d048da417 to before 2902c3ebcca52ca845c03182000e8d71d3a5196f, 84c61fe1a75b4255df1e1e7c054c9e6d048da417 to before c09dd3773b5950e9cfb6c9b9a5f6e36d06c62677, 84c61fe1a75b4255df1e1e7c054c9e6d048da417 to before 3439c15ae91a517cf3c650ea15a8987699416ad9, 84c61fe1a75b4255df1e1e7c054c9e6d048da417 to before 29c0ce3c8cdb6dc5d61139c937f34cb888a6f42e, 84c61fe1a75b4255df1e1e7c054c9e6d048da417 to before 62708b9452f8eb77513115b17c4f8d1a22ebf843
Linux

Linux · 6.0
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: net/tls/tls_sw.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.