CVE-2025-38608: linux kernel from 5.0 (inclusive), before 5.4.297 (exclusive), from 5.5 (inclusive), before 5.10.241 (exclusive), from…

Affected technology

linux kernel · from 5.0 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.148 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.102 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.42 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.10 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.1 (exclusive)
linux

debian linux · 11.0
debian

Linux · 7246d8ed4dcce23f7509949a77be15fa9f0e3d28 to before 6ba20ff3cdb96a908b9dc93cf247d0b087672e7c, 7246d8ed4dcce23f7509949a77be15fa9f0e3d28 to before 849d24dc5aed45ebeb3490df429356739256ac40, 7246d8ed4dcce23f7509949a77be15fa9f0e3d28 to before 73fc5d04009d3969ff8e8574f0fd769f04124e59, 7246d8ed4dcce23f7509949a77be15fa9f0e3d28 to before 16aca8bb4ad0d8a13c8b6da4007f4e52d53035bb, 7246d8ed4dcce23f7509949a77be15fa9f0e3d28 to before 0e853c1464bcf61207f8b5c32d2ac5ee495e859d, 7246d8ed4dcce23f7509949a77be15fa9f0e3d28 to before ee03766d79de0f61ea29ffb6ab1c7b196ea1b02e, 7246d8ed4dcce23f7509949a77be15fa9f0e3d28 to before 90d6ef67440cec2a0aad71a0108c8f216437345c, 7246d8ed4dcce23f7509949a77be15fa9f0e3d28 to before 1e480387d4b42776f8957fb148af9d75ce93b96d, 7246d8ed4dcce23f7509949a77be15fa9f0e3d28 to before 178f6a5c8cb3b6be1602de0964cd440243f493c9
Linux

Linux · 5.0
Linux

Component: Not specified by the source
File: net/tls/tls_sw.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.6/10) rates confidentiality impact as high; integrity and availability impact as low. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.