CVE-2025-38653: linux kernel from 6.0 (inclusive), before 6.1.148 (exclusive), from 6.2 (inclusive), before 6.6.102 (exclusive), from…

Affected technology

linux kernel · from 6.0 (inclusive), before 6.1.148 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.102 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.42 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.10 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.1 (exclusive)
linux

debian linux · 11.0
debian

Linux · 3f61631d47f115b83c935d0039f95cb68b0c8ab7 to before c35b0feb80b48720dfbbf4e33759c7be3faaebb6, 3f61631d47f115b83c935d0039f95cb68b0c8ab7 to before 33c778ea0bd0fa62ff590497e72562ff90f82b13, 3f61631d47f115b83c935d0039f95cb68b0c8ab7 to before fc1072d934f687e1221d685cf1a49a5068318f34, 3f61631d47f115b83c935d0039f95cb68b0c8ab7 to before d136502e04d8853a9aecb335d07bbefd7a1519a8, 3f61631d47f115b83c935d0039f95cb68b0c8ab7 to before 1fccbfbae1dd36198dc47feac696563244ad81d3, 3f61631d47f115b83c935d0039f95cb68b0c8ab7 to before ff7ec8dc1b646296f8d94c39339e8d3833d16c05
Linux

Linux · 6.0
Linux

Component: Not specified by the source
File: fs/proc/generic.c, fs/proc/inode.c, fs/proc/internal.h, include/linux/proc_fs.h

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.