CVE-2025-38102: linux kernel from 4.0 (inclusive), before 5.4.296 (exclusive), from 5.5 (inclusive), before 5.10.240 (exclusive), from…

Affected technology

linux kernel · from 4.0 (inclusive), before 5.4.296 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.240 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.186 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.142 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.94 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.34 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.3 (exclusive)
linux

debian linux · 11.0
debian

Linux · a1d88436d53a75e950db15834b3d2f8c0c358fdc to before 74095bbbb19ca74a0368d857603a2438c88ca86c, a1d88436d53a75e950db15834b3d2f8c0c358fdc to before 468aec888f838ce5174b96e0cb4396790d6f60ca, a1d88436d53a75e950db15834b3d2f8c0c358fdc to before b4209e4b778e4e57d0636e1c9fc07a924dbc6043, a1d88436d53a75e950db15834b3d2f8c0c358fdc to before 58a90db70aa6616411e5f69d1982d9b1dd97d774, a1d88436d53a75e950db15834b3d2f8c0c358fdc to before 6e3af836805ed1d7a699f76ec798626198917aa4, a1d88436d53a75e950db15834b3d2f8c0c358fdc to before 00ddc7dad55b7bbb78df80d6e174d0c4764dea0c, a1d88436d53a75e950db15834b3d2f8c0c358fdc to before 75b5313c80c39a26d27cbb602f968a05576c36f9, a1d88436d53a75e950db15834b3d2f8c0c358fdc to before 1bd6406fb5f36c2bb1e96e27d4c3e9f4d09edde4
Linux

Linux · 4.0
Linux

Component: Not specified by the source
File: drivers/misc/vmw_vmci/vmci_host.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.