CVE-2025-38107: linux kernel 6.0; +2 more affected products

Affected technology

linux kernel · from 5.4.213 (inclusive), before 5.5 (exclusive)
linux

linux kernel · from 5.10.142 (inclusive), before 5.10.239 (exclusive)
linux

linux kernel · from 5.15.66 (inclusive), before 5.15.186 (exclusive)
linux

linux kernel · from 5.19.8 (inclusive), before 6.0 (exclusive)
linux

linux kernel · from 6.0.1 (inclusive), before 6.1.142 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.94 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.34 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.3 (exclusive)
linux

linux kernel · 6.0
linux

linux kernel · 6.0 · update rc4
linux

linux kernel · 6.0 · update rc5
linux

linux kernel · 6.0 · update rc6
linux

linux kernel · 6.0 · update rc7
linux

linux kernel · 6.16 · update rc1
linux

debian linux · 11.0
debian

Linux · 699d82e9a6db29d509a71f1f2f4316231e6232e6 to before eb7b74e9754e1ba2088f914ad1f57a778b11894b, ce881ddbdc028fb1988b66e40e45ca0529c23b46 to before 0b479d0aa488cb478eb2e1d8868be946ac8afb4f, b05972f01e7d30419987a1f221b5593668fd6448 to before 347867cb424edae5fec1622712c8dd0a2c42918f, b05972f01e7d30419987a1f221b5593668fd6448 to before 0383b25488a545be168744336847549d4a2d3d6c, b05972f01e7d30419987a1f221b5593668fd6448 to before 073f64c03516bcfaf790f8edc772e0cfb8a84ec3, b05972f01e7d30419987a1f221b5593668fd6448 to before fed94bd51d62d2e0e006aa61480e94e5cd0582b0, b05972f01e7d30419987a1f221b5593668fd6448 to before d92adacdd8c2960be856e0b82acc5b7c5395fddb, fffa19b5e58c34004a0d6f642d9c24b11d213994, fb155f6597cd7bc3aeed668c3bb15fc3b7cb257d, 5.10.142 to before 5.10.239, 5.15.66 to before 5.15.186, 5.4.213 to before 5.5, 5.19.8 to before 5.20
Linux

Linux · 6.0
Linux

Component: Not specified by the source
File: net/sched/sch_ets.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.