CVE-2025-38075: linux kernel from 3.1 (inclusive), before 5.4.294 (exclusive), from 5.5 (inclusive), before 5.10.238 (exclusive), from…

Affected technology

linux kernel · from 3.1 (inclusive), before 5.4.294 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.238 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.185 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.141 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.93 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.31 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.14.9 (exclusive)
linux

linux kernel · 6.15 · update rc1
linux

linux kernel · 6.15 · update rc2
linux

linux kernel · 6.15 · update rc3
linux

debian linux · 11.0
debian

Linux · e48354ce078c079996f89d715dfa44814b4eba01 to before 571ce6b6f5cbaf7d24af03cad592fc0e2a54de35, e48354ce078c079996f89d715dfa44814b4eba01 to before 2c5081439c7ab8da08427befe427f0d732ebc9f9, e48354ce078c079996f89d715dfa44814b4eba01 to before 019ca2804f3fb49a7f8e56ea6aeaa1ff32724c27, e48354ce078c079996f89d715dfa44814b4eba01 to before 6815846e0c3a62116a7da9740e3a7c10edc5c7e9, e48354ce078c079996f89d715dfa44814b4eba01 to before fe8421e853ef289e1324fcda004751c89dd9c18a, e48354ce078c079996f89d715dfa44814b4eba01 to before 87389bff743c55b6b85282de91109391f43e0814, e48354ce078c079996f89d715dfa44814b4eba01 to before 3e6429e3707943078240a2c0c0b3ee99ea9b0d9c, e48354ce078c079996f89d715dfa44814b4eba01 to before 7f533cc5ee4c4436cee51dc58e81dfd9c3384418
Linux

Linux · 3.1
Linux

Component: Not specified by the source
File: drivers/target/iscsi/iscsi_target.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.