CVE-2025-38584: linux kernel from 2.6.34 (inclusive), before 6.15.10 (exclusive), from 6.16 (inclusive), before 6.16.1 (exclusive); +2…

Affected technology

linux kernel · from 2.6.34 (inclusive), before 6.15.10 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.1 (exclusive)
linux

Linux · 16295bec6398a3eedc9377e1af6ff4c71b98c300 to before a2048e475e22b13dc3e53d485b7e6e11464ed9a6, 16295bec6398a3eedc9377e1af6ff4c71b98c300 to before 73f132e60857038416540c3599b1de6033d7575a, 16295bec6398a3eedc9377e1af6ff4c71b98c300 to before 609e59193fc6d9dd323f1c6ae1fdd721f1c79680, 16295bec6398a3eedc9377e1af6ff4c71b98c300 to before a11a12a9880ab37342b73c93cfe1a3ada02ff0db, 16295bec6398a3eedc9377e1af6ff4c71b98c300 to before f231d5d001ec75f5886c02d496a4c79edc383d45, 16295bec6398a3eedc9377e1af6ff4c71b98c300 to before dbe3e911a59bda6de96e7cae387ff882c2c177fa, 16295bec6398a3eedc9377e1af6ff4c71b98c300 to before cdf79bd2e1ecb3cc75631c73d8f4149be6019a52, 16295bec6398a3eedc9377e1af6ff4c71b98c300 to before 71203f68c7749609d7fc8ae6ad054bdedeb24f91
Linux

Linux · 2.6.34
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
Function: correctly, padata_reorder
File: include/linux/padata.h, kernel/padata.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.