CYBER CODE RED

Get real-time updates on Telegram

P4

CVE-2025-38683: linux kernel 6.12; +3 more affected products

CVE-2025-38683. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00176 (percentile 0.06678), scored 19-Oct-2026.

Affected technology

linux kernel · from 4.19.323 (inclusive), before 4.20 (exclusive)
linux

linux kernel · from 5.4.285 (inclusive), before 5.5 (exclusive)
linux

linux kernel · from 5.10.229 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.15.170 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 6.1.115 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.6.59 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.11.6 (inclusive), before 6.12 (exclusive)
linux

linux kernel · from 6.12.1 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

linux kernel · 6.12
linux

linux kernel · 6.12 · update rc5
linux

linux kernel · 6.12 · update rc6
linux

linux kernel · 6.12 · update rc7
linux

linux kernel · 6.17 · update rc1
linux

debian linux · 11.0
debian

Linux · 3eb6aa870057da9f1304db660f68b9c2eb7e856d to before 3ca41ab55d23a0aa71661a5a56a8f06c11db90dc, b7a396f76ada277d049558db648389456458af65 to before 3467c4ebb334658c6fcf3eabb64a6e8b2135e010, 4faa6e3e66b3251eb4bf5761d2f3f0f14095aaca to before 4eff1e57a8ef98d70451b94e8437e458b27dd234, 62c85b9a0dd7471a362170323e1211ad98ff7b4b to before 2a70cbd1aef8b8be39992ab7b776ce1390091774, 4c262801ea60c518b5bebc22a09f5b78b3147da2 to before d036104947176d030bec64792d54e1b4f4c7f318, 4c262801ea60c518b5bebc22a09f5b78b3147da2 to before 5276896e6923ebe8c68573779d784aaf7d987cce, 4c262801ea60c518b5bebc22a09f5b78b3147da2 to before 4293f6c5ccf735b26afeb6825def14d830e0367b, 4c262801ea60c518b5bebc22a09f5b78b3147da2 to before 33caa208dba6fa639e8a92fd0c8320b652e5550c, 7abd221a55a61b6b2bf0e80f850bfc0ae75c7e01, 31a38a908c98aebc7a1104dab5f1ba199f234b7b, 04d748d4bd2d86739b159563f257e3dc5492c88d, 5.10.229 to before 5.10.241, 5.15.170 to before 5.15.190, 6.1.115 to before 6.1.149, 6.6.59 to before 6.6.103, 4.19.323 to before 4.20, 5.4.285 to before 5.5, 6.11.6 to before 6.12
Linux

Linux · 6.12
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: drivers/net/hyperv/hyperv_net.h, drivers/net/hyperv/netvsc_drv.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-476
CCR priority
22.0 /100 (P4)
CVSS 3.1
5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS
0.00176 · percentile 0.06678 · 2026-10-19
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2025-38683.html