CVE-2025-38677: linux kernel from 3.8 (inclusive), before 5.4.297 (exclusive), from 5.5 (inclusive), before 5.10.241 (exclusive), from…

Affected technology

linux kernel · from 3.8 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.44 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.4 (exclusive)
linux

debian linux · 11.0
debian

Linux · 98e4da8ca301e062d79ae168c67e56f3c3de3ce4 to before ee4d13f5407cbdf1216cc258f45492075713889a, 98e4da8ca301e062d79ae168c67e56f3c3de3ce4 to before a650654365c57407413e9b1f6ff4d539bf2e99ca, 98e4da8ca301e062d79ae168c67e56f3c3de3ce4 to before 6b7784ea07e6aa044f74b39d6b5af5e28746fc81, 98e4da8ca301e062d79ae168c67e56f3c3de3ce4 to before 901f62efd6e855f93d8b1175540f29f4dc45ba55, 98e4da8ca301e062d79ae168c67e56f3c3de3ce4 to before 92ef491b506a0f4dd971a3a76f86f2d8f5370180, 98e4da8ca301e062d79ae168c67e56f3c3de3ce4 to before 888aa660144bcb6ec07839da756ee46bfcf7fc53, 98e4da8ca301e062d79ae168c67e56f3c3de3ce4 to before f1d5093d9fe9f3c74c123741c88666cc853b79c5, 98e4da8ca301e062d79ae168c67e56f3c3de3ce4 to before 77de19b6867f2740cdcb6c9c7e50d522b47847a4
Linux

Linux · 3.8
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: fs/f2fs/node.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.