CVE-2025-38430: linux kernel before 5.4.295 (exclusive), from 5.5 (inclusive), before 5.10.239 (exclusive), from 5.11 (inclusive)…

Affected technology

linux kernel · before 5.4.295 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.239 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.186 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.142 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.95 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.35 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.4 (exclusive)
linux

debian linux · 11.0
debian

Linux · ed94164398c935a42be7b129a478eb19c598b68a to before bf78a2706ce975981eb5167f2d3b609eb5d24c19, ed94164398c935a42be7b129a478eb19c598b68a to before b1d0323a09a29f81572c7391e0d80d78724729c9, ed94164398c935a42be7b129a478eb19c598b68a to before 425efc6b3292a3c79bfee4a1661cf043dcd9cf2f, ed94164398c935a42be7b129a478eb19c598b68a to before 64a723b0281ecaa59d31aad73ef8e408a84cb603, ed94164398c935a42be7b129a478eb19c598b68a to before e7e943ddd1c6731812357a28e7954ade3a7d8517, ed94164398c935a42be7b129a478eb19c598b68a to before 7a75a956692aa64211a9e95781af1ec461642de4, ed94164398c935a42be7b129a478eb19c598b68a to before 2c54bd5a380ebf646fb9efbc4ae782ff3a83a5af, ed94164398c935a42be7b129a478eb19c598b68a to before 1244f0b2c3cecd3f349a877006e67c9492b41807
Linux

Linux · 4.8
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

Component: Not specified by the source
File: fs/nfsd/nfs4proc.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.