CVE-2025-38078: linux kernel before 5.4.294 (exclusive), from 5.5 (inclusive), before 5.10.238 (exclusive), from 5.11 (inclusive)…

Affected technology

linux kernel · before 5.4.294 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.238 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.185 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.141 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.93 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.31 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.14.9 (exclusive)
linux

linux kernel · 6.15 · update rc1
linux

linux kernel · 6.15 · update rc2
linux

linux kernel · 6.15 · update rc3
linux

linux kernel · 6.15 · update rc4
linux

linux kernel · 6.15 · update rc5
linux

linux kernel · 6.15 · update rc6
linux

linux kernel · 6.15 · update rc7
linux

debian linux · 11.0
debian

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c0e05a76fc727929524ef24a19c302e6dd40233f, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8170d8ec4efd0be352c14cb61f374e30fb0c2a25, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 10217da9644ae75cea7330f902c35fc5ba78bbbf, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f3e14d706ec18faf19f5a6e75060e140fea05d4a, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 74d90875f3d43f3eff0e9861c4701418795d3455, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before bf85e49aaf3a3c5775ea87369ea5f159c2148db4, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before afa56c960fcb4db37f2e3399f28e9402e4e1f470, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 93a81ca0657758b607c3f4ba889ae806be9beb73
Linux

Linux · 2.6.12
Linux

Component: Not specified by the source
File: include/sound/pcm.h, sound/core/oss/pcm_oss.c, sound/core/pcm_native.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.