Get real-time updates on Telegram
CVE-2025-38614: linux kernel 2.6.38; +6 more affected products
CVE-2025-38614. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00177 (percentile 0.06815), scored 14-Oct-2026.
Affected technology
linux kernel · from 2.6.32.30 (inclusive), before 2.6.33 (exclusive)
linux
linux kernel · from 2.6.33.8 (inclusive), before 2.6.34 (exclusive)
linux
linux kernel · from 2.6.34.10 (inclusive), before 2.6.35 (exclusive)
linux
linux kernel · from 2.6.35.12 (inclusive), before 2.6.36 (exclusive)
linux
linux kernel · from 2.6.37.3 (inclusive), before 2.6.38 (exclusive)
linux
linux kernel · from 2.6.38.1 (inclusive), before 5.15.190 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux
linux kernel · from 6.16 (inclusive), before 6.16.1 (exclusive)
linux
linux kernel · 2.6.38
linux
linux kernel · 2.6.38 · update rc7
linux
linux kernel · 2.6.38 · update rc8
linux
debian linux · 11.0
debian
Linux · 22bacca48a1755f79b7e0f192ddb9fbb7fc6e64e to before 71379495ab70eaba19224bd71b5b9b399eb85e04, 22bacca48a1755f79b7e0f192ddb9fbb7fc6e64e to before 1b13b033062824495554e836a1ff5f85ccf6b039, 22bacca48a1755f79b7e0f192ddb9fbb7fc6e64e to before 2a0c0c974bea9619c6f41794775ae4b97530e0e6, 22bacca48a1755f79b7e0f192ddb9fbb7fc6e64e to before 7a2125962c42d5336ca0495a9ce4cb38a63e9161, 22bacca48a1755f79b7e0f192ddb9fbb7fc6e64e to before ea5f97dbdcb1651581a22bd10afd2f0dd9dc11d6, 22bacca48a1755f79b7e0f192ddb9fbb7fc6e64e to before 3542c90797bc3ab83ebab54b737d751cf3682036, 22bacca48a1755f79b7e0f192ddb9fbb7fc6e64e to before f2e467a48287c868818085aa35389a224d226732, 8216e1a0d47cae06a75c42346f19dffe14e42d57, 28a92748aa4bc57d35e7b079498b0ac2e7610a37, 7eebcd4792c5a341559aed327b6afecbb1c46402, 0eccd188cfeaf857a26f2d72941d27d298cf6a54, a72affdbb09f3f24f64ffcbbdf62c2e57c58f379, 2.6.32.30 to before 2.6.33, 2.6.33.8 to before 2.6.34, 2.6.34.10 to before 2.6.35, 2.6.35.12 to before 2.6.36, 2.6.37.3 to before 2.6.38
Linux
Linux · 2.6.38
Linux
SIMATIC CN 4100 · 0 to before V5.0
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: fs/eventpoll.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-674
- CCR priority
- 22.0 /100 (P4)
- CVSS 3.1
- 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
- EPSS
- 0.00177 · percentile 0.06815 · 2026-10-14
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-38614.html