CVE-2025-38193: linux kernel 2.6.12; +2 more affected products

Affected technology

linux kernel · from 2.6.13 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.240 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.186 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.142 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.95 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.35 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.4 (exclusive)
linux

linux kernel · 2.6.12
linux

linux kernel · 2.6.12 · update rc2
linux

linux kernel · 2.6.12 · update rc3
linux

linux kernel · 2.6.12 · update rc4
linux

linux kernel · 2.6.12 · update rc5
linux

linux kernel · 6.16 · update rc1
linux

debian linux · 11.0
debian

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before e0936ff56be4e08ad5b60ec26971eae0c40af305, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2254d038dab9c194fe6a4b1ce31034f42e91a6e5, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 956b5aebb349449b38d920d444ca1392d43719d1, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b11a50544af691b787384089b68f740ae20a441b, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 0357da9149eac621f39e235a135ebf155f01f7c3, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f9b97d466e6026ccbdda30bb5b71965b67ccbc82, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 590b2d7d0beadba2aa576708a05a05f0aae39295, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7ca52541c05c832d32b112274f81a985101f9ba8
Linux

Linux · 2.6.12
Linux

Component: Not specified by the source
File: net/sched/sch_sfq.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.