CYBER CODE RED

Get real-time updates on Telegram

P5Verified

CVE-2025-38083: linux kernel from 5.0 (inclusive), before 5.4.295 (exclusive), from 5.5 (inclusive), before 5.10.239 (exclusive), from…

CVE-2025-38083. CVSS 3.1 base score 4.7 (MEDIUM, NVD). EPSS 0.00152 (percentile 0.03909), scored 14-Oct-2026.

Affected technology

linux kernel · from 5.0 (inclusive), before 5.4.295 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.239 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.186 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.142 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.94 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.34 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.3 (exclusive)
linux

linux kernel · 6.16 · update rc1
linux

debian linux · 11.0
debian

Linux · 7b8e0b6e659983154c8d7e756cdb833d89a3d4d7 to before 53d11560e957d53ee87a0653d258038ce12361b7, 7b8e0b6e659983154c8d7e756cdb833d89a3d4d7 to before 4483d8b9127591c60c4eb789d6cab953bc4522a9, 7b8e0b6e659983154c8d7e756cdb833d89a3d4d7 to before 20f68e6a9e41693cb0e55e5b9ebbcb40983a4b8f, 7b8e0b6e659983154c8d7e756cdb833d89a3d4d7 to before 3aaa7c01cf19d9b9bb64b88b65c3a6fd05da2eb4, 7b8e0b6e659983154c8d7e756cdb833d89a3d4d7 to before 46c15c9d0f65c9ba857d63f53264f4b17e8a715f, 7b8e0b6e659983154c8d7e756cdb833d89a3d4d7 to before e3f6745006dc9423d2b065b90f191cfa11b1b584, 7b8e0b6e659983154c8d7e756cdb833d89a3d4d7 to before 93f9eeb678d4c9c1abf720b3615fa8299a490845, 7b8e0b6e659983154c8d7e756cdb833d89a3d4d7 to before d35acc1be3480505b5931f17e4ea9b7617fea4d3
Linux

Linux · 5.0
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

Component: Not specified by the source
File: net/sched/sch_prio.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-362
CCR priority
18.8 /100 (P5)
CVSS 3.1
4.7 /10 · CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS
0.00152 · percentile 0.03909 · 2026-10-14
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2025-38083.html