P5Verified

CVE-2025-38681: linux kernel from 5.7 (inclusive), before 5.10.241 (exclusive), from 5.11 (inclusive), before 5.15.190 (exclusive)…

CVE-2025-38681. CVSS 3.1 base score 4.7 (MEDIUM, NVD). EPSS 0.00126 (percentile 0.02043), scored 14-Oct-2026.

Affected technology

linux kernel · from 5.7 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

debian linux · 11.0
debian

Linux · bbd6ec605c0fc286c3f8ce60b4ed44635361d58b to before 3ee9a8c27bfd72c3f465004fa8455785d61be5e8, bbd6ec605c0fc286c3f8ce60b4ed44635361d58b to before 69bea84b06b5e779627e7afdbf4b60a7d231c76f, bbd6ec605c0fc286c3f8ce60b4ed44635361d58b to before ac25ec5fa2bf6e606dc7954488e4dded272fa9cd, bbd6ec605c0fc286c3f8ce60b4ed44635361d58b to before 1636b5e9c3543b87d673e32a47e7c18698882425, bbd6ec605c0fc286c3f8ce60b4ed44635361d58b to before ff40839e018b82c4d756d035f34a63aa2d93be83, bbd6ec605c0fc286c3f8ce60b4ed44635361d58b to before 67995d4244694928ce701928e530b5b4adeb17b4, bbd6ec605c0fc286c3f8ce60b4ed44635361d58b to before ca8c414499f2e5337a95a76be0d21b728ee31c6b, bbd6ec605c0fc286c3f8ce60b4ed44635361d58b to before 59305202c67fea50378dcad0cc199dbc13a0e99a
Linux

Linux · 5.7
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: arch/arm64/mm/ptdump_debugfs.c, arch/riscv/mm/ptdump.c, arch/s390/mm/dump_pagetables.c, mm/ptdump.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 15-Oct-2026 09:20 UTC

CWE: CWE-362
CCR priority: 18.8 /100 (P5)
CVSS 3.1: 4.7 /10 · CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS: 0.00126 · percentile 0.02043 · 2026-10-14
KEV: no

Provenance

FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2025-38681.html