CVE-2025-38346: linux kernel from 4.15 (inclusive), before 5.4.295 (exclusive), from 5.5 (inclusive), before 5.10.239 (exclusive)…

Affected technology

linux kernel · from 4.15 (inclusive), before 5.4.295 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.239 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.186 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.142 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.95 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.35 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.4 (exclusive)
linux

debian linux · 11.0
debian

Linux · aba4b5c22cbac296f4081a0476d0c55828f135b4 to before d064c68781c19f378af1ae741d9132d35d24b2bb, aba4b5c22cbac296f4081a0476d0c55828f135b4 to before 8690cd3258455bbae64f809e1d3ee0f043661c71, aba4b5c22cbac296f4081a0476d0c55828f135b4 to before 6805582abb720681dd1c87ff677f155dcf4e86c9, aba4b5c22cbac296f4081a0476d0c55828f135b4 to before 03a162933c4a03b9f1a84f7d8482903c7e1e11bb, aba4b5c22cbac296f4081a0476d0c55828f135b4 to before 83a692a9792aa86249d68a8ac0b9d55ecdd255fa, aba4b5c22cbac296f4081a0476d0c55828f135b4 to before 8e89c17dc8970c5f71a3a991f5724d4c8de42d8c, aba4b5c22cbac296f4081a0476d0c55828f135b4 to before f78a786ad9a5443a29eef4dae60cde85b7375129, aba4b5c22cbac296f4081a0476d0c55828f135b4 to before f914b52c379c12288b7623bb814d0508dbe7481d
Linux

Linux · 4.15
Linux

Component: Not specified by the source
Function: tracing, trace, names
File: kernel/trace/ftrace.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.