CYBER CODE RED

Get real-time updates on Telegram

P4

CVE-2025-38684: linux kernel from 5.4.296 (inclusive), before 5.5 (exclusive), from 5.6 (inclusive), before 5.10.241 (exclusive), from…

CVE-2025-38684. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00176 (percentile 0.06677), scored 19-Oct-2026.

Affected technology

linux kernel · from 5.4.296 (inclusive), before 5.5 (exclusive)
linux

linux kernel · from 5.6 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

debian linux · 11.0
debian

Linux · dcc68b4d8084e1ac9af0d4022d6b1aff6a139a33 to before bdfddcde86e8b9245d9c0c2efe2b6fe8dcf6bf41, dcc68b4d8084e1ac9af0d4022d6b1aff6a139a33 to before be9692dafdfb36d9c43afd9d4e1d9d9ba8e7b51b, dcc68b4d8084e1ac9af0d4022d6b1aff6a139a33 to before 97ec167cd2e8a81a2d87331a2ed92daf007542c8, dcc68b4d8084e1ac9af0d4022d6b1aff6a139a33 to before 84a24fb446ee07b22b64aae6f0e3f4a38266310a, dcc68b4d8084e1ac9af0d4022d6b1aff6a139a33 to before 5b3b346bc4c2aa2c428735438a11989d251f32f1, dcc68b4d8084e1ac9af0d4022d6b1aff6a139a33 to before d69f4a258cd91b3bcef7089eb0401005aae2aed5, dcc68b4d8084e1ac9af0d4022d6b1aff6a139a33 to before 970c1c731c4ede46d05f5b0355724d1e400cfbca, dcc68b4d8084e1ac9af0d4022d6b1aff6a139a33 to before 87c6efc5ce9c126ae4a781bc04504b83780e3650, 3b290923ad2b23596208c1e29520badef4356a43, 5.4.296 to before 5.5
Linux

Linux · 5.6
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: net/sched/sch_ets.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-476
CCR priority
22.0 /100 (P4)
CVSS 3.1
5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS
0.00176 · percentile 0.06677 · 2026-10-19
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2025-38684.html