CVE-2025-38035: linux kernel from 5.0 (inclusive), before 5.4.294 (exclusive), from 5.5 (inclusive), before 5.10.238 (exclusive), from…

Affected technology

linux kernel · from 5.0 (inclusive), before 5.4.294 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.238 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.185 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.141 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.93 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.31 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.14.9 (exclusive)
linux

linux kernel · 6.15 · update rc1
linux

linux kernel · 6.15 · update rc2
linux

linux kernel · 6.15 · update rc3
linux

linux kernel · 6.15 · update rc4
linux

debian linux · 11.0
debian

Linux · 872d26a391da92ed8f0c0f5cb5fef428067b7f30 to before 6265538446e2426f4bf3b57e91d7680b2047ddd9, 872d26a391da92ed8f0c0f5cb5fef428067b7f30 to before 17e58be5b49f58bf17799a504f55c2d05ab2ecdc, 872d26a391da92ed8f0c0f5cb5fef428067b7f30 to before fc01b547c3f8bfa6e1d23cd5a2c63c736e8c3e4e, 872d26a391da92ed8f0c0f5cb5fef428067b7f30 to before c240375587ddcc80e1022f52ee32b946bbc3a639, 872d26a391da92ed8f0c0f5cb5fef428067b7f30 to before 3a982ada411b8c52695f1784c3f4784771f30209, 872d26a391da92ed8f0c0f5cb5fef428067b7f30 to before ec462449f4cf616b0aa2ed119f5f44b5fdfcefab, 872d26a391da92ed8f0c0f5cb5fef428067b7f30 to before a21cb31642ffc84ca4ce55028212a96f72f54d30, 872d26a391da92ed8f0c0f5cb5fef428067b7f30 to before 46d22b47df2741996af277a2838b95f130436c13
Linux

Linux · 5.0
Linux

Component: Not specified by the source
File: drivers/nvme/target/tcp.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.