CVE-2025-38524: linux kernel from 4.9 (inclusive), before 6.6.100 (exclusive), from 6.7 (inclusive), before 6.12.40 (exclusive), from…

Affected technology

linux kernel · from 4.9 (inclusive), before 6.6.100 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.40 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.8 (exclusive)
linux

linux kernel · 6.16 · update rc1
linux

linux kernel · 6.16 · update rc2
linux

linux kernel · 6.16 · update rc3
linux

linux kernel · 6.16 · update rc4
linux

linux kernel · 6.16 · update rc5
linux

linux kernel · 6.16 · update rc6
linux

Linux · 248f219cb8bcbfbd7f132752d44afa2df7c241d1 to before 4aed0eeca58e26d752bb08b293b8dc75c6820b23, 248f219cb8bcbfbd7f132752d44afa2df7c241d1 to before 7692bde890061797f3dece0148d7859e85c55778, 248f219cb8bcbfbd7f132752d44afa2df7c241d1 to before 839fe96c15209dc2255c064bb44b636efe04f032, 248f219cb8bcbfbd7f132752d44afa2df7c241d1 to before 6c75a97a32a5fa2060c3dd30207e63b6914b606d, 248f219cb8bcbfbd7f132752d44afa2df7c241d1 to before 962fb1f651c2cf2083e0c3ef53ba69e3b96d3fbc
Linux

Linux · 4.9
Linux

Component: Not specified by the source
File: include/trace/events/rxrpc.h, net/rxrpc/call_accept.c, net/rxrpc/recvmsg.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.