CVE-2025-38317: linux kernel from 6.11 (inclusive), before 6.12.34 (exclusive), from 6.13 (inclusive), before 6.15.3 (exclusive); +1…

Affected technology

linux kernel · from 6.11 (inclusive), before 6.12.34 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.3 (exclusive)
linux

Linux · 3f73c24f28b317f22df7870c25ff82f1d625c6c2 to before 0c57aa8ef94cffc5c2d68230e19329a03e71a94f, 3f73c24f28b317f22df7870c25ff82f1d625c6c2 to before 8c4a200d03574bfcbf54fdb7ba5968b58ad2e0b3, 3f73c24f28b317f22df7870c25ff82f1d625c6c2 to before 8c7a5031a6b0d42e640fbd2d5d05f61f74e32dce
Linux

Linux · 6.11
Linux

Component: Not specified by the source
File: drivers/net/wireless/ath/ath12k/debugfs_htt_stats.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.