CVE-2025-38386: linux kernel before 5.4.296 (exclusive), from 5.5 (inclusive), before 5.10.240 (exclusive), from 5.11 (inclusive)…

Affected technology

linux kernel · before 5.4.296 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.240 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.187 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.144 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.97 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.37 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.6 (exclusive)
linux

linux kernel · 6.16 · update rc1
linux

linux kernel · 6.16 · update rc2
linux

debian linux · 11.0
debian

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b49d224d1830c46e20adce2a239c454cdab426f1, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2219e49857ffd6aea1b1ca5214d3270f84623a16, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ab1e8491c19eb2ea0fda81ef28e841c7cb6399f5, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 4305d936abde795c2ef6ba916de8f00a50f64d2d, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d547779e72cea9865b732cd45393c4cd02b3598e, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 18ff4ed6a33a7e3f2097710eacc96bea7696e803, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c9e4da550ae196132b990bd77ed3d8f2d9747f87, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6fcab2791543924d438e7fa49276d0998b0a069f
Linux

Linux · 2.6.12
Linux

Component: Not specified by the source
File: drivers/acpi/acpica/dsmethod.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.