CVE-2025-38685: linux kernel 2.6.12; +6 more affected products

Affected technology

linux kernel · from 2.6.13 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

linux kernel · 2.6.12
linux

linux kernel · 2.6.12 · update rc2
linux

linux kernel · 2.6.12 · update rc3
linux

linux kernel · 2.6.12 · update rc4
linux

linux kernel · 2.6.12 · update rc5
linux

debian linux · 11.0
debian

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 078e62bffca4b7e72e8f3550eb063ab981c36c7a, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 4c4d7ddaf1d43780b106bedc692679f965dc5a3a, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 27b118aebdd84161c8ff5ce49d9d536f2af10754, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ed9b8e5016230868c8d813d9179523f729fec8c6, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 56701bf9eeb63219e378cb7fcbd066ea4eaeeb50, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before cfec17721265e72e50cc69c6004fe3475cd38df2, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before af0db3c1f898144846d4c172531a199bb3ca375d
Linux

Linux · 2.6.12
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

Component: Not specified by the source
File: drivers/video/fbdev/core/fbcon.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.