CVE-2025-38499: linux kernel 5.14; +5 more affected products

Affected technology

linux kernel · from 4.4.281 (inclusive), before 4.5 (exclusive)
linux

linux kernel · from 4.9.280 (inclusive), before 4.10 (exclusive)
linux

linux kernel · from 4.14.244 (inclusive), before 4.15 (exclusive)
linux

linux kernel · from 4.19.204 (inclusive), before 4.20 (exclusive)
linux

linux kernel · from 5.4.141 (inclusive), before 5.5 (exclusive)
linux

linux kernel · from 5.10.59 (inclusive), before 5.11 (exclusive)
linux

linux kernel · from 5.13.11 (inclusive), before 5.14 (exclusive)
linux

linux kernel · from 5.14.1 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.147 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.100 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.40 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.3 (exclusive)
linux

linux kernel · 5.14
linux

linux kernel · 5.14 · update rc6
linux

linux kernel · 5.14 · update rc7
linux

debian linux · 11.0
debian

Linux · 427215d85e8d1476da1a86b8d67aceb485eb3631 to before 36fecd740de2d542d2091d65d36554ee2bcf9c65, 427215d85e8d1476da1a86b8d67aceb485eb3631 to before d717325b5ecf2a40daca85c61923e17f32306179, 427215d85e8d1476da1a86b8d67aceb485eb3631 to before dc6a664089f10eab0fb36b6e4f705022210191d2, 427215d85e8d1476da1a86b8d67aceb485eb3631 to before e77078e52fbf018ab986efb3c79065ab35025607, 427215d85e8d1476da1a86b8d67aceb485eb3631 to before 38628ae06e2a37770cd794802a3f1310cf9846e3, 427215d85e8d1476da1a86b8d67aceb485eb3631 to before c28f922c9dcee0e4876a2c095939d77fe7e15116, c6e8810d25295acb40a7b69ed3962ff181919571, e3eee87c846dc47f6d8eb6d85e7271f24122a279, 517b875dfbf58f0c6c9e32dc90f5cf42d71a42ce, 963d85d630dabe75a3cfde44a006fec3304d07b8, 812f39ed5b0b7f34868736de3055c92c7c4cf459, 6a002d48a66076524f67098132538bef17e8445e, 41812f4b84484530057513478c6770590347dc30, 4.4.281 to before 4.5, 4.9.280 to before 4.10, 4.14.244 to before 4.15, 4.19.204 to before 4.20, 5.4.141 to before 5.5, 5.10.59 to before 5.11, 5.13.11 to before 5.14
Linux

Linux · 5.14
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

Component: Not specified by the source
File: fs/namespace.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.