CVE-2025-38232: linux kernel before 6.12.35 (exclusive), from 6.13 (inclusive), before 6.15.4 (exclusive); +4 more affected products

Affected technology

linux kernel · before 6.12.35 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.4 (exclusive)
linux

Linux · bd5ae9288d6451bd346a1b4a59d4fe7e62ba29b7 to before 49b57b98fa601ae6cc7897bab4515129da8290f7, bd5ae9288d6451bd346a1b4a59d4fe7e62ba29b7 to before 88d6785c173a7c4de05bef8c4fd8a9b42ead02d5, bd5ae9288d6451bd346a1b4a59d4fe7e62ba29b7 to before 8120e420013d947c890f358f30a2d98ba8ac20bc, bd5ae9288d6451bd346a1b4a59d4fe7e62ba29b7 to before 2029ca75cdfa6a25716a5a76b751486cce7e3822, bd5ae9288d6451bd346a1b4a59d4fe7e62ba29b7 to before 327011a2bb4f7de9c72b891a96ce8d902828bddf, bd5ae9288d6451bd346a1b4a59d4fe7e62ba29b7 to before f7fb730cac9aafda8b9813b55d04e28a9664d17c, 8677e99150b0830d29cc1318b4cc559e176940bb, 7c7cb07d4affcf41749234fe9dc4d90cd3959e32, 4d41f65efeec0a6da6088341203c81e49ebfcd90, 5.4.102 to before 5.5, 5.10.20 to before 5.11, 5.11.3 to before 5.12
Linux

Linux · 5.12
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: fs/nfsd/nfsctl.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.