CVE-2025-38004: linux kernel from 2.6.25 (inclusive), before 5.4.294 (exclusive), from 5.5 (inclusive), before 5.10.238 (exclusive)…

Affected technology

linux kernel · from 2.6.25 (inclusive), before 5.4.294 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.238 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.185 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.141 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.93 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.31 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.14.9 (exclusive)
linux

linux kernel · 6.15 · update rc1
linux

linux kernel · 6.15 · update rc2
linux

linux kernel · 6.15 · update rc3
linux

linux kernel · 6.15 · update rc4
linux

linux kernel · 6.15 · update rc5
linux

linux kernel · 6.15 · update rc6
linux

linux kernel · 6.15 · update rc7
linux

debian linux · 11.0
debian

Linux · ffd980f976e7fd666c2e61bf8ab35107efd11828 to before 8f1c022541bf5a923c8d6fa483112c15250f30a4, ffd980f976e7fd666c2e61bf8ab35107efd11828 to before 7595de7bc56e0e52b74e56c90f7e247bf626d628, ffd980f976e7fd666c2e61bf8ab35107efd11828 to before fbd8fdc2b218e979cfe422b139b8f74c12419d1f, ffd980f976e7fd666c2e61bf8ab35107efd11828 to before 2a437b86ac5a9893c902f30ef66815bf13587bf6, ffd980f976e7fd666c2e61bf8ab35107efd11828 to before 76c84c3728178b2d38d5604e399dfe8b0752645e, ffd980f976e7fd666c2e61bf8ab35107efd11828 to before cc55dd28c20a6611e30596019b3b2f636819a4c0, ffd980f976e7fd666c2e61bf8ab35107efd11828 to before c4e8a172501e677ebd8ea9d9161d97dc4df56fbd, ffd980f976e7fd666c2e61bf8ab35107efd11828 to before c2aba69d0c36a496ab4f2e81e9c2b271f2693fd7
Linux

Linux · 2.6.25
Linux

Component: Not specified by the source
File: net/can/bcm.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.3/10) rates confidentiality and availability impact as high; integrity impact as low. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.