CVE-2025-38204: linux kernel before 5.4.295 (exclusive), from 5.5 (inclusive), before 5.10.239 (exclusive), from 5.11 (inclusive)…

Affected technology

linux kernel · before 5.4.295 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.239 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.186 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.15.4 (exclusive)
linux

debian linux · 11.0
debian

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 81af4b34fd72d390d7f237c6a545cc6d09707956, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before bfa4655d28f338e68d345aed80d19be7999bbce2, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 44618bee303bed151ef3a525ff79fbd7689593b5, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2ec34dc7094b14149ce091c77aff43a45d255518, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c8399564a58fb6ea2ff21a6fd278417943cb51a5, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 5dff41a86377563f7a2b968aae00d25b4ceb37c9
Linux

Linux · 2.6.12
Linux

Component: Not specified by the source
File: fs/jfs/jfs_dtree.c

Attack conditions (Source advisory, CVSS 3.1): Local · No privileges required · User interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.