CVE-2025-38257: linux kernel from 5.4 (inclusive), before 5.15.187 (exclusive), from 5.16 (inclusive), before 6.1.143 (exclusive)…

Affected technology

linux kernel · from 5.4 (inclusive), before 5.15.187 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.143 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.96 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.36 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.5 (exclusive)
linux

linux kernel · 6.16 · update rc1
linux

linux kernel · 6.16 · update rc2
linux

linux kernel · 6.16 · update rc3
linux

debian linux · 11.0
debian

Linux · f2bbc96e7cfad3891b7bf9bd3e566b9b7ab4553d to before ad1bdd24a02d5a8d119af8e4cd50933780a6d29f, f2bbc96e7cfad3891b7bf9bd3e566b9b7ab4553d to before faa1ab4a23c42e34dc000ef4977b751d94d5148c, f2bbc96e7cfad3891b7bf9bd3e566b9b7ab4553d to before 88f3869649edbc4a13f6c2877091f81cd5a50f05, f2bbc96e7cfad3891b7bf9bd3e566b9b7ab4553d to before f855b119e62b004a5044ed565f2a2b368c4d3f16, f2bbc96e7cfad3891b7bf9bd3e566b9b7ab4553d to before 73483ca7e07a5e39bdf612eec9d3d293e8bef649, f2bbc96e7cfad3891b7bf9bd3e566b9b7ab4553d to before 7360ee47599af91a1d5f4e74d635d9408a54e489
Linux

Linux · 5.4
Linux

Component: Not specified by the source
File: drivers/s390/crypto/pkey_api.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.3/10) rates confidentiality and availability impact as high; integrity impact as low. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.