CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2025-38643: linux kernel 5.5; +1 more affected products

CVE-2025-38643. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00181 (percentile 0.07134), scored 14-Oct-2026.

Affected technology

linux kernel · from 4.14.170 (inclusive), before 4.15 (exclusive)
linux

linux kernel · from 4.19.102 (inclusive), before 4.20 (exclusive)
linux

linux kernel · from 5.4.18 (inclusive), before 5.5 (exclusive)
linux

linux kernel · from 5.5.1 (inclusive), before 6.6.118 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.57 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.10 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.1 (exclusive)
linux

linux kernel · 5.5
linux

linux kernel · 5.5 · update rc7
linux

Linux · 26ec17a1dc5ecdd8d91aba63ead6f8b5ad5dea0d to before defe9ce121160788547e8e6ec4438ad8a14f40dd, 26ec17a1dc5ecdd8d91aba63ead6f8b5ad5dea0d to before b3d24038eb775f2f7a1dfef58d8e1dc444a12820, 26ec17a1dc5ecdd8d91aba63ead6f8b5ad5dea0d to before 4a63523d3541eef4cf504a9682e6fbe94ffe79a6, 26ec17a1dc5ecdd8d91aba63ead6f8b5ad5dea0d to before 7022df2248c08c6f75a01714163ac902333bf3db, 26ec17a1dc5ecdd8d91aba63ead6f8b5ad5dea0d to before dbce810607726408f889d3358f4780fd1436861e, 26ec17a1dc5ecdd8d91aba63ead6f8b5ad5dea0d to before 2c5dee15239f3f3e31aa5c8808f18996c039e2c1, 2dbb6faebb94d6d5ae87e5ea6be9280c366393e1, a4f85674e4693904ade7cbf6722d0d105d8062d8, e233cbaf8ecc5859f0417dd53899da4edb477991, 4.14.170 to before 4.15, 4.19.102 to before 4.20, 5.4.18 to before 5.5
Linux

Linux · 5.5
Linux

Component: Not specified by the source
File: net/wireless/reg.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-667
CCR priority
22.0 /100 (P4)
CVSS 3.1
5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS
0.00181 · percentile 0.07134 · 2026-10-14
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2025-38643.html