CVE-2025-37958, CVE-2025-38666, CVE-2025-39964 +2 more CVEs: linux kernel from 2.6.38 (inclusive), before 5.10.245 (exclusive), from 5.11 (inclusive), before…

CVE-2025-37958

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38666

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-39964

Affected technology

linux kernel · from 2.6.38 (inclusive), before 5.10.245 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.194 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.154 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.108 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.49 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.9 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

linux kernel · 6.17 · update rc4
linux

linux kernel · 6.17 · update rc5
linux

linux kernel · 6.17 · update rc6
linux

simatic s7-1500 cpu 1518-4 pn/dp mfp firmware · from 3.1.6 (inclusive)
siemens

simatic s7-1500 cpu 1518f-4 pn/dp mfp firmware · from 3.1.6 (inclusive)
siemens

Linux · 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 to before 0f28c4adbc4a97437874c9b669fd7958a8c6d6ce, 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 to before e4c1ec11132ec466f7362a95f36a506ce4dc08c9, 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 to before 1f323a48e9b5ebfe6dc7d130fdf5c3c0e92a07c8, 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 to before 7c4491b5644e3a3708f3dbd7591be0a570135b84, 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 to before 9aee87da5572b3a14075f501752e209801160d3d, 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 to before 45bcf60fe49b37daab1acee57b27211ad1574042, 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 to before 1b34cbbf4f011a121ef7b2d7d6e6920a036d5285
Linux

Linux · 2.6.38
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: crypto/af_alg.c, include/crypto/if_alg.h

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39993

Affected technology

Linux · 21677cfc562a27e099719d413287bc8d1d24deb7 to before 9348976003e39754af344949579e824a0a210fc4, 21677cfc562a27e099719d413287bc8d1d24deb7 to before b03fac6e2a38331faf8510b480becfa90cea1c9f, 21677cfc562a27e099719d413287bc8d1d24deb7 to before 71c52b073922d05e79e6de7fc7f5f38f927929a4, 21677cfc562a27e099719d413287bc8d1d24deb7 to before 71096a6161a25e84acddb89a9d77f138502d26ab, 21677cfc562a27e099719d413287bc8d1d24deb7 to before 71da40648741d15b302700b68973fe8b382aef3c, 21677cfc562a27e099719d413287bc8d1d24deb7 to before fd5d3e6b149ec8cce045d86a2b5e3664d6b32ba5, 21677cfc562a27e099719d413287bc8d1d24deb7 to before d9f6ce99624a41c3bcb29a8d7d79b800665229dd, 21677cfc562a27e099719d413287bc8d1d24deb7 to before 2e7fd93b9cc565b839bc55a6662475718963e156, 21677cfc562a27e099719d413287bc8d1d24deb7 to before fa0f61cc1d828178aa921475a9b786e7fbb65ccb
Linux

Linux · 2.6.35
Linux

Component: Not specified by the source
File: drivers/media/rc/imon.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

A local attacker with low privileges can trigger a use-after-free error. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not state a further attacker outcome.

CVE-2025-40018

Affected technology

Linux · 61b1ab4583e275af216c8454b9256de680499b19 to before 8a6ecab3847c213ce2855b0378e63ce839085de3, 61b1ab4583e275af216c8454b9256de680499b19 to before 421b1ae1574dfdda68b835c15ac4921ec0030182, 61b1ab4583e275af216c8454b9256de680499b19 to before 1d79471414d7b9424d699afff2aa79fff322f52d, 61b1ab4583e275af216c8454b9256de680499b19 to before 53717f8a4347b78eac6488072ad8e5adbaff38d9, 61b1ab4583e275af216c8454b9256de680499b19 to before 8cbe2a21d85727b66d7c591fd5d83df0d8c4f757, 61b1ab4583e275af216c8454b9256de680499b19 to before dc1a481359a72ee7e548f1f5da671282a7c13b8f, 61b1ab4583e275af216c8454b9256de680499b19 to before a343811ef138a265407167294275201621e9ebb2, 61b1ab4583e275af216c8454b9256de680499b19 to before 134121bfd99a06d44ef5ba15a9beb075297c0821
Linux

Linux · 2.6.39
Linux

Component: Not specified by the source
File: net/netfilter/ipvs/ip_vs_ftp.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.