CVE-2025-38424: linux kernel from 3.7 (inclusive), before 5.4.295 (exclusive), from 5.5 (inclusive), before 5.10.239 (exclusive), from…

Affected technology

linux kernel · from 3.7 (inclusive), before 5.4.295 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.239 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.186 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.142 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.95 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.35 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.4 (exclusive)
linux

linux kernel · 6.16 · update rc1
linux

linux kernel · 6.16 · update rc2
linux

debian linux · 11.0
debian

Linux · c5ebcedb566ef17bda7b02686e0d658a7bb42ee7 to before 7b8f3c72175c6a63a95cf2e219f8b78e2baad34e, c5ebcedb566ef17bda7b02686e0d658a7bb42ee7 to before 507c9a595bad3abd107c6a8857d7fd125d89f386, c5ebcedb566ef17bda7b02686e0d658a7bb42ee7 to before a9f6aab7910a0ef2895797f15c947f6d1053160f, c5ebcedb566ef17bda7b02686e0d658a7bb42ee7 to before 975ffddfa2e19823c719459d2364fcaa17673964, c5ebcedb566ef17bda7b02686e0d658a7bb42ee7 to before 2ee6044a693735396bb47eeaba1ac3ae26c1c99b, c5ebcedb566ef17bda7b02686e0d658a7bb42ee7 to before 456019adaa2f5366b89c868dea9b483179bece54, c5ebcedb566ef17bda7b02686e0d658a7bb42ee7 to before 7311970d07c4606362081250da95f2c7901fc0db, c5ebcedb566ef17bda7b02686e0d658a7bb42ee7 to before 4f6fc782128355931527cefe3eb45338abd8ab39
Linux

Linux · 3.7
Linux

Component: Not specified by the source
File: kernel/events/core.c, kernel/exit.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.