CVE-2025-38470: linux kernel from 2.6.36 (inclusive), before 5.4.297 (exclusive), from 5.5 (inclusive), before 5.10.241 (exclusive)…

Affected technology

linux kernel · from 2.6.36 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.147 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.100 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.40 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.8 (exclusive)
linux

linux kernel · 6.16 · update rc1
linux

linux kernel · 6.16 · update rc2
linux

linux kernel · 6.16 · update rc3
linux

linux kernel · 6.16 · update rc4
linux

linux kernel · 6.16 · update rc5
linux

linux kernel · 6.16 · update rc6
linux

debian linux · 11.0
debian

Linux · ad1afb00393915a51c21b1ae8704562bf036855f to before ba48d3993af23753e1f1f01c8d592de9c7785f24, ad1afb00393915a51c21b1ae8704562bf036855f to before 35142b3816832889e50164d993018ea5810955ae, ad1afb00393915a51c21b1ae8704562bf036855f to before 047b61a24d7c866c502aeeea482892969a68f216, ad1afb00393915a51c21b1ae8704562bf036855f to before d43ef15bf4856c8c4c6c3572922331a5f06deb77, ad1afb00393915a51c21b1ae8704562bf036855f to before bb515c41306454937464da055609b5fb0a27821b, ad1afb00393915a51c21b1ae8704562bf036855f to before 8984bcbd1edf5bee5be06ad771d157333b790c33, ad1afb00393915a51c21b1ae8704562bf036855f to before 93715aa2d80e6c5cea1bb486321fc4585076928b, ad1afb00393915a51c21b1ae8704562bf036855f to before 579d4f9ca9a9a605184a9b162355f6ba131f678d
Linux

Linux · 2.6.36
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

Component: Not specified by the source
File: net/8021q/vlan.c, net/8021q/vlan.h

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.