Get real-time updates on Telegram
CVE-2025-38684: linux kernel from 5.4.296 (inclusive), before 5.5 (exclusive), from 5.6 (inclusive), before 5.10.241 (exclusive), from…
CVE-2025-38684. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00176 (percentile 0.06677), scored 19-Oct-2026.
Affected technology
linux kernel · from 5.4.296 (inclusive), before 5.5 (exclusive)
linux
linux kernel · from 5.6 (inclusive), before 5.10.241 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux
linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux
linux kernel · 6.17 · update rc1
linux
debian linux · 11.0
debian
Linux · dcc68b4d8084e1ac9af0d4022d6b1aff6a139a33 to before bdfddcde86e8b9245d9c0c2efe2b6fe8dcf6bf41, dcc68b4d8084e1ac9af0d4022d6b1aff6a139a33 to before be9692dafdfb36d9c43afd9d4e1d9d9ba8e7b51b, dcc68b4d8084e1ac9af0d4022d6b1aff6a139a33 to before 97ec167cd2e8a81a2d87331a2ed92daf007542c8, dcc68b4d8084e1ac9af0d4022d6b1aff6a139a33 to before 84a24fb446ee07b22b64aae6f0e3f4a38266310a, dcc68b4d8084e1ac9af0d4022d6b1aff6a139a33 to before 5b3b346bc4c2aa2c428735438a11989d251f32f1, dcc68b4d8084e1ac9af0d4022d6b1aff6a139a33 to before d69f4a258cd91b3bcef7089eb0401005aae2aed5, dcc68b4d8084e1ac9af0d4022d6b1aff6a139a33 to before 970c1c731c4ede46d05f5b0355724d1e400cfbca, dcc68b4d8084e1ac9af0d4022d6b1aff6a139a33 to before 87c6efc5ce9c126ae4a781bc04504b83780e3650, 3b290923ad2b23596208c1e29520badef4356a43, 5.4.296 to before 5.5
Linux
Linux · 5.6
Linux
SIMATIC CN 4100 · 0 to before V5.0
Siemens
Component: Not specified by the source
File: net/sched/sch_ets.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-476
- CCR priority
- 22.0 /100 (P4)
- CVSS 3.1
- 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
- EPSS
- 0.00176 · percentile 0.06677 · 2026-10-19
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-20 01:44:01.123206+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-38684.html