CVE-2025-38617: linux kernel 2.6.12; +2 more affected products

Affected technology

linux kernel · from 2.6.13 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.148 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.102 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.42 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.10 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.1 (exclusive)
linux

linux kernel · 2.6.12
linux

linux kernel · 2.6.12 · update rc2
linux

linux kernel · 2.6.12 · update rc3
linux

linux kernel · 2.6.12 · update rc4
linux

linux kernel · 2.6.12 · update rc5
linux

debian linux · 11.0
debian

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 18f13f2a83eb81be349a9757ba2141ff1da9ad73, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7da733f117533e9b2ebbd530a22ae4028713955c, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ba2257034755ae773722f15f4c3ad1dcdad15ca9, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7de07705007c7e34995a5599aaab1d23e762d7ca, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 88caf46db8239e6471413d28aabaa6b8bd552805, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f2e8fcfd2b1bc754920108b7f2cd75082c5a18df, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before e50ccfaca9e3c671cae917dcb994831a859cf588, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f1791fd7b845bea0ce9674fcf2febee7bc87a893, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 01d3c8417b9c1b884a8a981a3b886da556512f36
Linux

Linux · 2.6.12
Linux

Component: Not specified by the source
File: net/packet/af_packet.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.