CVE-2025-38108: linux kernel from 5.0 (inclusive), before 5.4.295 (exclusive), from 5.5 (inclusive), before 5.10.239 (exclusive), from…

Affected technology

linux kernel · from 5.0 (inclusive), before 5.4.295 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.239 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.186 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.142 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.94 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.34 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.3 (exclusive)
linux

linux kernel · 6.16 · update rc1
linux

debian linux · 11.0
debian

Linux · 0c8d13ac96070000da33f394f45e9c19638483c5 to before 2790c4ec481be45a80948d059cd7c9a06bc37493, 0c8d13ac96070000da33f394f45e9c19638483c5 to before a1bf6a4e9264a685b0e642994031f9c5aad72414, 0c8d13ac96070000da33f394f45e9c19638483c5 to before 110a47efcf23438ff8d31dbd9c854fae2a48bf98, 0c8d13ac96070000da33f394f45e9c19638483c5 to before f569984417a4e12c67366e69bdcb752970de921d, 0c8d13ac96070000da33f394f45e9c19638483c5 to before 2a71924ca4af59ffc00f0444732b6cd54b153d0e, 0c8d13ac96070000da33f394f45e9c19638483c5 to before 4b755305b2b0618e857fdadb499365b5f2e478d1, 0c8d13ac96070000da33f394f45e9c19638483c5 to before 444ad445df5496a785705019268a8a84b84484bb, 0c8d13ac96070000da33f394f45e9c19638483c5 to before 85a3e0ede38450ea3053b8c45d28cf55208409b8
Linux

Linux · 5.0
Linux

Component: Not specified by the source
File: net/sched/sch_red.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.