CVE-2025-38460: linux kernel 2.6.12; +2 more affected products

Affected technology

linux kernel · from 2.6.13 (inclusive), before 5.4.296 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.240 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.189 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.146 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.99 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.39 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.7 (exclusive)
linux

linux kernel · 2.6.12
linux

linux kernel · 2.6.12 · update rc2
linux

linux kernel · 2.6.12 · update rc3
linux

linux kernel · 2.6.12 · update rc4
linux

linux kernel · 2.6.12 · update rc5
linux

linux kernel · 6.16 · update rc1
linux

linux kernel · 6.16 · update rc2
linux

linux kernel · 6.16 · update rc3
linux

linux kernel · 6.16 · update rc4
linux

linux kernel · 6.16 · update rc5
linux

debian linux · 11.0
debian

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a4c5785feb979cd996a99cfaad8bf353b2e79301, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 70eac9ba7ce25d99c1d99bbf4ddb058940f631f9, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 3251ce3979f41bd228f77a7615f9dd616d06a110, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ee4d9e4ddf3f9c4ee2ec0a3aad6196ee36d30e57, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 06935c50cfa3ac57cce80bba67b6d38ec1406e92, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 36caab990b69ef4eec1d81c52a19f080b7daa059, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f58e4270c73e7f086322978d585ea67c8076ce49, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 706cc36477139c1616a9b2b96610a8bb520b7119
Linux

Linux · 2.6.12
Linux

Component: Not specified by the source
File: net/atm/clip.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.