CVE-2025-38115: linux kernel from 4.16 (inclusive), before 5.4.295 (exclusive), from 5.5 (inclusive), before 5.10.239 (exclusive)…

Affected technology

linux kernel · from 4.16 (inclusive), before 5.4.295 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.239 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.186 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.142 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.94 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.34 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.3 (exclusive)
linux

linux kernel · 6.16 · update rc1
linux

debian linux · 11.0
debian

Linux · a53851e2c3218aa30b77abd6e68cf1c371f15afe to before c337efb20d6d9f9bbb4746f6b119917af5c886dc, a53851e2c3218aa30b77abd6e68cf1c371f15afe to before b44f791f27b14c9eb6b907fbe51f2ba8bec32085, a53851e2c3218aa30b77abd6e68cf1c371f15afe to before 5814a7fc3abb41f63f2d44c9d3ff9d4e62965b72, a53851e2c3218aa30b77abd6e68cf1c371f15afe to before 9c19498bdd7cb9d854bd3c54260f71cf7408495e, a53851e2c3218aa30b77abd6e68cf1c371f15afe to before b4e9bab6011b9559b7c157b16b91ae46d4d8c533, a53851e2c3218aa30b77abd6e68cf1c371f15afe to before d1bc80da75c789f2f6830df89d91fb2f7a509943, a53851e2c3218aa30b77abd6e68cf1c371f15afe to before 82448d4dcd8406dec688632a405fdcf7f170ec69, a53851e2c3218aa30b77abd6e68cf1c371f15afe to before 82ffbe7776d0ac084031f114167712269bf3d832
Linux

Linux · 4.16
Linux

Component: Not specified by the source
File: net/sched/sch_sfq.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.