P4Verified

CVE-2025-38322: linux kernel from 6.1.134 (inclusive), before 6.1.149 (exclusive), from 6.6.87 (inclusive), before 6.6.101…

CVE-2025-38322. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00188 (percentile 0.07831), scored 14-Oct-2026.

Affected technology

linux kernel · from 6.1.134 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.6.87 (inclusive), before 6.6.101 (exclusive)
linux

linux kernel · from 6.12.23 (inclusive), before 6.12.49 (exclusive)
linux

linux kernel · from 6.13.11 (inclusive), before 6.14 (exclusive)
linux

linux kernel · from 6.14.2 (inclusive), before 6.15.4 (exclusive)
linux

linux kernel · 6.16 · update rc1
linux

linux kernel · 6.16 · update rc2
linux

debian linux · 11.0
debian

Linux · 781b2db0eb7731fbde510c268b7ccc62959c3feb to before 702ea6028032d6c1fe96c2d4762a3575e3654819, e7f6922c8a5b41522a8329ea6bbf815993b2dd28 to before 79e2dd573116d3338507c311460da9669095c94d, 3a8bec6583e5239de3bd597ab382dc6c2b0c29a1 to before e97c45c770f5e56c784a46c2a96ab968d26b97d9, f9bdf1f953392c9edd69a7f884f78c0390127029 to before a85cc69acdcb05f8cd226b8ea0778b8e2e887e6f, f9bdf1f953392c9edd69a7f884f78c0390127029 to before b0823d5fbacb1c551d793cbfe7af24e0d1fa45ed, 06cd7bfbb86e9db3e9013ea6636ad2c6f0a1664d, d8370aa704bd7e384918c8f466856374725c0585, 6.1.134 to before 6.1.149, 6.6.87 to before 6.6.101, 6.12.23 to before 6.12.49, 6.13.11 to before 6.14, 6.14.2 to before 6.15
Linux

Linux · 6.15
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
Function: is
File: arch/x86/events/intel/core.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 15-Oct-2026 09:20 UTC

CCR priority: 22.0 /100 (P4)
CVSS 3.1: 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS: 0.00188 · percentile 0.07831 · 2026-10-14
KEV: no

Provenance

FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2025-38322.html