CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2025-38058: linux kernel before 5.4.294 (exclusive), from 5.5 (inclusive), before 5.10.238 (exclusive), from 5.11 (inclusive)…

CVE-2025-38058. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00165 (percentile 0.05308), scored 14-Oct-2026.

Affected technology

linux kernel · before 5.4.294 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.238 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.185 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.141 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.93 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.31 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.14.9 (exclusive)
linux

linux kernel · 6.15 · update rc1
linux

linux kernel · 6.15 · update rc2
linux

linux kernel · 6.15 · update rc3
linux

linux kernel · 6.15 · update rc4
linux

linux kernel · 6.15 · update rc5
linux

debian linux · 11.0
debian

Linux · 48a066e72d970a3e225a9c18690d570c736fc455 to before 628fb00195ce21a90cf9e4e3d105cd9e58f77b40, 48a066e72d970a3e225a9c18690d570c736fc455 to before b89eb56a378b7b2c1176787fc228d0a57172bdd5, 48a066e72d970a3e225a9c18690d570c736fc455 to before f6d45fd92f62845cbd1eb5128fd8f0ed7d0c5a42, 48a066e72d970a3e225a9c18690d570c736fc455 to before 9b0915e72b3cf52474dcee0b24a2f99d93e604a3, 48a066e72d970a3e225a9c18690d570c736fc455 to before d8ece4ced3b051e656c77180df2e69e19e24edc1, 48a066e72d970a3e225a9c18690d570c736fc455 to before 8cafd7266fa02e0863bacbf872fe635c0b9725eb, 48a066e72d970a3e225a9c18690d570c736fc455 to before b55996939c71a3e1a38f3cdc6a8859797efc9083, 48a066e72d970a3e225a9c18690d570c736fc455 to before 250cf3693060a5f803c5f1ddc082bb06b16112a9
Linux

Linux · 3.13
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

Component: Not specified by the source
File: fs/namespace.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-667
CCR priority
22.0 /100 (P4)
CVSS 3.1
5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS
0.00165 · percentile 0.05308 · 2026-10-14
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2025-38058.html