CVE-2025-38680: linux kernel 2.6.26; +3 more affected products

Affected technology

linux kernel · from 2.6.27 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

linux kernel · 2.6.26
linux

linux kernel · 2.6.26 · update rc9
linux

debian linux · 11.0
debian

Linux · c0efd232929c2cd87238de2cccdaf4e845be5b0c to before 9ad554217c9b945031c73df4e8176a475e2dea57, c0efd232929c2cd87238de2cccdaf4e845be5b0c to before 1e269581b3aa5962fdc52757ab40da286168c087, c0efd232929c2cd87238de2cccdaf4e845be5b0c to before 8343f3fe0b755925f83d60b05e92bf4396879758, c0efd232929c2cd87238de2cccdaf4e845be5b0c to before ffdd82182953df643aa63d999b6f1653d0c93778, c0efd232929c2cd87238de2cccdaf4e845be5b0c to before a97e062e4ff3dab84a2f1eb811e9eddc6699e2a9, c0efd232929c2cd87238de2cccdaf4e845be5b0c to before cac702a439050df65272c49184aef7975fe3eff2, c0efd232929c2cd87238de2cccdaf4e845be5b0c to before 424980d33b3f816485513e538610168b03fab9f1, c0efd232929c2cd87238de2cccdaf4e845be5b0c to before 6d4a7c0b296162354b6fc759a1475b9d57ddfaa6, c0efd232929c2cd87238de2cccdaf4e845be5b0c to before 782b6a718651eda3478b1824b37a8b3185d2740c
Linux

Linux · 2.6.26
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
Function: accesses
File: drivers/media/usb/uvc/uvc_driver.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.