CVE-2025-38184: linux kernel from 4.9 (inclusive), before 5.4.295 (exclusive), from 5.5 (inclusive), before 5.10.239 (exclusive), from…

Affected technology

linux kernel · from 4.9 (inclusive), before 5.4.295 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.239 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.186 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.142 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.95 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.35 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.4 (exclusive)
linux

linux kernel · 6.16 · update rc1
linux

linux kernel · 6.16 · update rc2
linux

debian linux · 11.0
debian

Linux · 832629ca5c313e122b22b8e73a6d80f111b1a1ae to before 3998283e4c32c0fe69edd59b0876c193f50abce6, 832629ca5c313e122b22b8e73a6d80f111b1a1ae to before c2e17984752b9131061d1a2ca1199da2706337fd, 832629ca5c313e122b22b8e73a6d80f111b1a1ae to before 8595350615f952fcf8bc861464a6bf6b1129af50, 832629ca5c313e122b22b8e73a6d80f111b1a1ae to before 05d332ba075753d569d66333d62d60fff5f57ad8, 832629ca5c313e122b22b8e73a6d80f111b1a1ae to before d3dfe821dfe091c0045044343c8d86596d66e2cf, 832629ca5c313e122b22b8e73a6d80f111b1a1ae to before 0d3d91c3500f0c480e016faa4e2259c588616e59, 832629ca5c313e122b22b8e73a6d80f111b1a1ae to before 0f4a72fb266e48dbe928e1d936eab149e4ac3e1b, 832629ca5c313e122b22b8e73a6d80f111b1a1ae to before f82727adcf2992822e12198792af450a76ebd5ef
Linux

Linux · 4.9
Linux

Component: Not specified by the source
File: net/tipc/udp_media.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.