Get real-time updates on Telegram
CVE-2025-38582: linux kernel from 6.1.113 (inclusive), before 6.2 (exclusive), from 6.6.54 (inclusive), before 6.7 (exclusive), from…
CVE-2025-38582. CVSS 3.1 base score 7.8 (HIGH, NVD). EPSS 0.00176 (percentile 0.06715), scored 20-Oct-2026.
Affected technology
linux kernel · from 6.1.113 (inclusive), before 6.2 (exclusive)
linux
linux kernel · from 6.6.54 (inclusive), before 6.7 (exclusive)
linux
linux kernel · from 6.10.13 (inclusive), before 6.11 (exclusive)
linux
linux kernel · from 6.11.2 (inclusive), before 6.12.42 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.15.10 (exclusive)
linux
linux kernel · from 6.16 (inclusive), before 6.16.1 (exclusive)
linux
Linux · d2d9c5127122745da6e887f451dd248cfeffca33 to before 067ca15be8b8342931536b66206c496e76864ecf, fd8489294dd2beefb70f12ec4f6132aeec61a4d0 to before dab173bae3303f074f063750a8dead2550d8c782, fd8489294dd2beefb70f12ec4f6132aeec61a4d0 to before fc8b0f5b16bab2e032b4cfcd6218d5df3b80b2ea, fd8489294dd2beefb70f12ec4f6132aeec61a4d0 to before 10b083dbba22be19baa848432b6f25aa68ab2db5, fd8489294dd2beefb70f12ec4f6132aeec61a4d0 to before c6957b95ecc5b63c5a4bb4ecc28af326cf8f6dc8, 2ccf1c75d39949d8ea043d04a2e92d7100ea723d, dac2723d8bfa9cf5333f477741e6e5fa1ed34645, 60595923371c2ebe7faf82536c47eb0c967e3425, 6.6.54 to before 6.6.160, 6.1.113 to before 6.2, 6.10.13 to before 6.11, 6.11.2 to before 6.12
Linux
Linux · 6.12
Linux
Component: Not specified by the source
File: drivers/infiniband/hw/hns/hns_roce_hw_v2.c, drivers/infiniband/hw/hns/hns_roce_main.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-415
- CCR priority
- 31.2 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · NVD
- EPSS
- 0.00176 · percentile 0.06715 · 2026-10-20
- KEV
- no
Provenance
- GitHub Advisory Database · Source record · observed 2026-10-21 16:14:50.830645+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-21 16:09:05.633125+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-38582.html