CVE-2025-38321: linux kernel before 6.6.95 (exclusive), from 6.7 (inclusive), before 6.12.35 (exclusive), from 6.13 (inclusive)…

Affected technology

linux kernel · before 6.6.95 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.35 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.4 (exclusive)
linux

linux kernel · 6.16 · update rc1
linux

linux kernel · 6.16 · update rc2
linux

Linux · 73934e535cffbda1490fa97d82690a0f9aa73e94 to before b8ced2b9a23a1a2c1e0ed8d0d02512e51bdf38da, 548812afd96982a76a93ba76c0582ea670c40d9e to before 43f26094d6702e494e800532c3f1606e7a68eb30, 3fa640d035e5ae526769615c35cb9ed4be6e3662 to before 4479db143390bdcadc1561292aab579cdfa9f6c6, 3fa640d035e5ae526769615c35cb9ed4be6e3662 to before a2182743a8b4969481f64aec4908ff162e8a206c, ff4528bbc82d0d90073751f7b49e7b9e9c7e5638, 6.6.64 to before 6.6.95, 6.12.2 to before 6.12.35, 6.11.11 to before 6.12
Linux

Linux · 6.13
Linux

Component: Not specified by the source
File: fs/smb/client/cached_dir.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.