CVE-2025-38560: linux kernel from 5.19 (inclusive), before 6.1.148 (exclusive), from 6.2 (inclusive), before 6.6.102 (exclusive), from…

Affected technology

linux kernel · from 5.19 (inclusive), before 6.1.148 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.102 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.42 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.10 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.1 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

debian linux · 11.0
debian

Linux · 4f9c403e44e5e88feb27d5e617d1adc9cc7ef684 to before 1fec416c03d0a64cc21aa04ce4aa14254b017e6a, 4f9c403e44e5e88feb27d5e617d1adc9cc7ef684 to before 1fb873971e23c35c53823c62809a474a92bc3022, 4f9c403e44e5e88feb27d5e617d1adc9cc7ef684 to before aed15fc08f15dbb15822b2a0b653f67e76aa0fdf, 4f9c403e44e5e88feb27d5e617d1adc9cc7ef684 to before a762a4c8d9e768b538b3cc60615361a8cf377de8, 4f9c403e44e5e88feb27d5e617d1adc9cc7ef684 to before f92af52e6dbd8d066d77beba451e0230482dc45b, 4f9c403e44e5e88feb27d5e617d1adc9cc7ef684 to before 7b306dfa326f70114312b320d083b21fa9481e1e
Linux

Linux · 5.19
Linux

Component: Not specified by the source
File: arch/x86/boot/cpuflags.c, arch/x86/boot/startup/sev-shared.c, arch/x86/coco/sev/core.c, arch/x86/include/asm/cpufeatures.h, arch/x86/include/asm/sev.h, arch/x86/kernel/cpu/scattered.c

Attack conditions (Source advisory, CVSS 3.1): Local · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.3/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.