CVE-2025-38539: linux kernel from 2.6.31 (inclusive), before 5.4.297 (exclusive), from 5.5 (inclusive), before 5.10.241 (exclusive)…

Affected technology

linux kernel · from 2.6.31 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.147 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.100 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.40 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.8 (exclusive)
linux

linux kernel · 6.16 · update rc1
linux

linux kernel · 6.16 · update rc2
linux

linux kernel · 6.16 · update rc3
linux

linux kernel · 6.16 · update rc4
linux

linux kernel · 6.16 · update rc5
linux

linux kernel · 6.16 · update rc6
linux

debian linux · 11.0
debian

Linux · 110bf2b764eb6026b868d84499263cb24b1bcc8d to before e70f5ee4c8824736332351b703c46f9469ed7f6c, 110bf2b764eb6026b868d84499263cb24b1bcc8d to before db45632479ceecb669612ed8dbce927e3c6279fc, 110bf2b764eb6026b868d84499263cb24b1bcc8d to before ca60064ea03f14e06c763de018403cb56ba3207d, 110bf2b764eb6026b868d84499263cb24b1bcc8d to before 7803b28c9aa8d8bd4e19ebcf5f0db9612b0f333b, 110bf2b764eb6026b868d84499263cb24b1bcc8d to before 6bc94f20a4c304997288f9a45278c9d0c06987d3, 110bf2b764eb6026b868d84499263cb24b1bcc8d to before 33e20747b47ddc03569b6bc27a2d6894c1428182, 110bf2b764eb6026b868d84499263cb24b1bcc8d to before 70fecd519caad0c1741c3379d5348c9000a5b29d, 110bf2b764eb6026b868d84499263cb24b1bcc8d to before b5e8acc14dcb314a9b61ff19dcd9fdd0d88f70df
Linux

Linux · 2.6.31
Linux

Component: Not specified by the source
File: kernel/trace/trace_events.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.