CVE-2025-38181: linux kernel from 4.8 (inclusive), before 5.4.295 (exclusive), from 5.5 (inclusive), before 5.10.239 (exclusive), from…

Affected technology

linux kernel · from 4.8 (inclusive), before 5.4.295 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.239 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.186 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.142 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.95 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.35 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.4 (exclusive)
linux

linux kernel · 6.16 · update rc1
linux

linux kernel · 6.16 · update rc2
linux

debian linux · 11.0
debian

Linux · e1adea927080821ebfa7505bff752a4015955660 to before 956f1499412ed0953f6a116df7fdb855e9f1fc66, e1adea927080821ebfa7505bff752a4015955660 to before f4ae0f61dd9a63329ecb49b1e6356139d43240b8, e1adea927080821ebfa7505bff752a4015955660 to before dc724bd34d56f5589f7587a091a8cda2386826c4, e1adea927080821ebfa7505bff752a4015955660 to before 058dd4a370f23a5553a9449f2db53d5bfa88d45e, e1adea927080821ebfa7505bff752a4015955660 to before bde8833eb075ba8e8674de88e32de6b669966451, e1adea927080821ebfa7505bff752a4015955660 to before 988edde4d52d5c02ea4dd95d7619372a5e2fb7b7, e1adea927080821ebfa7505bff752a4015955660 to before d092c7fd8e220b23d6c47e03d7d0cc79e731f379, e1adea927080821ebfa7505bff752a4015955660 to before 10876da918fa1aec0227fb4c67647513447f53a9
Linux

Linux · 4.8
Linux

Component: Not specified by the source
File: net/ipv6/calipso.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.