CVE-2025-38601: linux kernel from 5.7 (inclusive), before 5.10.241 (exclusive), from 5.11 (inclusive), before 5.15.190 (exclusive)…

Affected technology

linux kernel · from 5.7 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.148 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.102 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.42 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.10 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.1 (exclusive)
linux

debian linux · 11.0
debian

Linux · 5118935b1bc28d0bce9427e584e11e905e68ee9a to before 3a6daae987a829534636fd85ed6f84d5f0ad7fa4, 5118935b1bc28d0bce9427e584e11e905e68ee9a to before eff3bb53c18c0ed4ab6f43d412b3ed3aecad52d5, 5118935b1bc28d0bce9427e584e11e905e68ee9a to before 916ac18d526a26f6072866b1a97622cf1351ef1c, 5118935b1bc28d0bce9427e584e11e905e68ee9a to before 5bf201c55fdf303e79005038648dfa1e8af48f54, 5118935b1bc28d0bce9427e584e11e905e68ee9a to before 72a48be1f53942793f3bc68a37fad1f38b53b082, 5118935b1bc28d0bce9427e584e11e905e68ee9a to before 0ebb5fe494501c19f31270008b26ab95201af6fd, 5118935b1bc28d0bce9427e584e11e905e68ee9a to before 16872194c80f2724472fc207991712895ac8a230, 5118935b1bc28d0bce9427e584e11e905e68ee9a to before a5b46aa7cf5f05c213316a018e49a8e086efd98e
Linux

Linux · 5.7
Linux

Component: Not specified by the source
File: drivers/net/wireless/ath/ath11k/hal.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.