CVE-2025-38154: linux kernel 6.10; +2 more affected products

Affected technology

linux kernel · from 5.15.162 (inclusive), before 5.15.186 (exclusive)
linux

linux kernel · from 6.1.95 (inclusive), before 6.1.142 (exclusive)
linux

linux kernel · from 6.6.35 (inclusive), before 6.6.94 (exclusive)
linux

linux kernel · from 6.9.6 (inclusive), before 6.10 (exclusive)
linux

linux kernel · from 6.10.1 (inclusive), before 6.12.34 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.3 (exclusive)
linux

linux kernel · 6.10
linux

linux kernel · 6.10 · update rc2
linux

linux kernel · 6.10 · update rc3
linux

linux kernel · 6.10 · update rc4
linux

linux kernel · 6.10 · update rc5
linux

linux kernel · 6.10 · update rc6
linux

linux kernel · 6.10 · update rc7
linux

debian linux · 11.0
debian

Linux · 4959ffc65a0e94f8acaac20deac49f89e6ded52d to before 4edb40b05cb6a261775abfd8046804ca139a5546, 5eabdf17fed2ad41b836bb4055ec36d95e512c50 to before b19cbf0b9a91f5a0d93fbcd761ff71c48ab40ed9, e946428439a0d2079959f5603256ac51b6047017 to before 4c6fa65ab2aec7df94809478c8d28ef38676a1b7, 4b4647add7d3c8530493f7247d11e257ee425bf0 to before 15c0250dae3b48a398447d2b364603821ed4ed90, 4b4647add7d3c8530493f7247d11e257ee425bf0 to before 7c0a16f6ea2b1c82a03bccd5d1bdb4a7bbd4d987, 4b4647add7d3c8530493f7247d11e257ee425bf0 to before 8259eb0e06d8f64c700f5fbdb28a5c18e10de291, 3627605de498639a3c586c8684d12c89cba11073, 5.15.162 to before 5.15.186, 6.1.95 to before 6.1.142, 6.6.35 to before 6.6.94, 6.9.6 to before 6.10
Linux

Linux · 6.10
Linux

Component: Not specified by the source
File: net/core/skmsg.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.