CVE-2025-38527: linux kernel 5.1; +2 more affected products

Affected technology

linux kernel · from 3.16.72 (inclusive), before 3.17 (exclusive)
linux

linux kernel · from 4.9.171 (inclusive), before 4.10 (exclusive)
linux

linux kernel · from 4.14.114 (inclusive), before 4.15 (exclusive)
linux

linux kernel · from 4.19.37 (inclusive), before 4.20 (exclusive)
linux

linux kernel · from 5.0.10 (inclusive), before 5.1 (exclusive)
linux

linux kernel · from 5.1.1 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.147 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.100 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.40 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.8 (exclusive)
linux

linux kernel · 5.1
linux

linux kernel · 5.1 · update rc6
linux

linux kernel · 5.1 · update rc7
linux

linux kernel · 6.16 · update rc1
linux

linux kernel · 6.16 · update rc2
linux

linux kernel · 6.16 · update rc3
linux

linux kernel · 6.16 · update rc4
linux

linux kernel · 6.16 · update rc5
linux

linux kernel · 6.16 · update rc6
linux

debian linux · 11.0
debian

Linux · b98749cac4a695f084a5ff076f4510b23e353ecd to before 4256a483fe58af66a46cbf3dc48ff26e580d3308, b98749cac4a695f084a5ff076f4510b23e353ecd to before 0a4eec84d4d2c4085d4ed8630fd74e4b39033c1b, b98749cac4a695f084a5ff076f4510b23e353ecd to before 2baaf5bbab2ac474c4f92c10fcb3310f824db995, b98749cac4a695f084a5ff076f4510b23e353ecd to before 09bce2138a30ef10d8821c8c3f73a4ab7a5726bc, b98749cac4a695f084a5ff076f4510b23e353ecd to before da11bd4b697b393a207f19a2ed7d382a811a3ddc, b98749cac4a695f084a5ff076f4510b23e353ecd to before 705c79101ccf9edea5a00d761491a03ced314210, 2429fcf06d3cb962693868ab0a927c9038f12a2d, 1ee4f2d7cdcd4508cc3cbe3b2622d7177b89da12, 53fc31a4853e30d6e8f142b824f724da27ff3e40, 8092ecc306d81186a64cda42411121f4d35aaff4, ebac4d0adf68f8962bd82fcf483936edd6ec095b, 3.16.72 to before 3.17, 4.9.171 to before 4.10, 4.14.114 to before 4.15, 4.19.37 to before 4.20, 5.0.10 to before 5.1
Linux

Linux · 5.1
Linux

Component: Not specified by the source
File: fs/smb/client/file.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.