CVE-2025-38478: linux kernel from 2.6.29 (inclusive), before 5.4.297 (exclusive), from 5.5 (inclusive), before 5.10.241 (exclusive)…

Affected technology

linux kernel · from 2.6.29 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.147 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.100 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.40 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.8 (exclusive)
linux

linux kernel · 6.16 · update rc1
linux

linux kernel · 6.16 · update rc2
linux

linux kernel · 6.16 · update rc3
linux

linux kernel · 6.16 · update rc4
linux

linux kernel · 6.16 · update rc5
linux

linux kernel · 6.16 · update rc6
linux

debian linux · 11.0
debian

Linux · ed9eccbe8970f6eedc1b978c157caf1251a896d4 to before 6f38c6380c3b38a05032b8881e41137385a6ce02, ed9eccbe8970f6eedc1b978c157caf1251a896d4 to before 13e4d9038a1e869445a996a3f604a84ef52fe8f4, ed9eccbe8970f6eedc1b978c157caf1251a896d4 to before 020eed5681d0f9bced73970368078a92d6cfaa9c, ed9eccbe8970f6eedc1b978c157caf1251a896d4 to before d3436638738ace8f101af7bdee2eae1bc38e9b29, ed9eccbe8970f6eedc1b978c157caf1251a896d4 to before 673ee92bd2d31055bca98a1d96b653f5284289c4, ed9eccbe8970f6eedc1b978c157caf1251a896d4 to before c42116dc70af6664526f7aa82cf937824ab42649, ed9eccbe8970f6eedc1b978c157caf1251a896d4 to before fe8713fb4e4e82a4f91910d9a41bf0613e69a0b9, ed9eccbe8970f6eedc1b978c157caf1251a896d4 to before 46d8c744136ce2454aa4c35c138cc06817f92b8e
Linux

Linux · 2.6.29
Linux

Component: Not specified by the source
File: drivers/comedi/comedi_fops.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.