Get real-time updates on Telegram
CVE-2025-38643: linux kernel 5.5; +1 more affected products
CVE-2025-38643. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00181 (percentile 0.07134), scored 14-Oct-2026.
Affected technology
linux kernel · from 4.14.170 (inclusive), before 4.15 (exclusive)
linux
linux kernel · from 4.19.102 (inclusive), before 4.20 (exclusive)
linux
linux kernel · from 5.4.18 (inclusive), before 5.5 (exclusive)
linux
linux kernel · from 5.5.1 (inclusive), before 6.6.118 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.57 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.15.10 (exclusive)
linux
linux kernel · from 6.16 (inclusive), before 6.16.1 (exclusive)
linux
linux kernel · 5.5
linux
linux kernel · 5.5 · update rc7
linux
Linux · 26ec17a1dc5ecdd8d91aba63ead6f8b5ad5dea0d to before defe9ce121160788547e8e6ec4438ad8a14f40dd, 26ec17a1dc5ecdd8d91aba63ead6f8b5ad5dea0d to before b3d24038eb775f2f7a1dfef58d8e1dc444a12820, 26ec17a1dc5ecdd8d91aba63ead6f8b5ad5dea0d to before 4a63523d3541eef4cf504a9682e6fbe94ffe79a6, 26ec17a1dc5ecdd8d91aba63ead6f8b5ad5dea0d to before 7022df2248c08c6f75a01714163ac902333bf3db, 26ec17a1dc5ecdd8d91aba63ead6f8b5ad5dea0d to before dbce810607726408f889d3358f4780fd1436861e, 26ec17a1dc5ecdd8d91aba63ead6f8b5ad5dea0d to before 2c5dee15239f3f3e31aa5c8808f18996c039e2c1, 2dbb6faebb94d6d5ae87e5ea6be9280c366393e1, a4f85674e4693904ade7cbf6722d0d105d8062d8, e233cbaf8ecc5859f0417dd53899da4edb477991, 4.14.170 to before 4.15, 4.19.102 to before 4.20, 5.4.18 to before 5.5
Linux
Linux · 5.5
Linux
Component: Not specified by the source
File: net/wireless/reg.c
Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-667
- CCR priority
- 22.0 /100 (P4)
- CVSS 3.1
- 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
- EPSS
- 0.00181 · percentile 0.07134 · 2026-10-14
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-15 22:58:54.984414+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-38643.html