CVE-2025-38693: linux kernel from 2.6.39 (inclusive), before 5.4.297 (exclusive), from 5.5 (inclusive), before 5.10.241 (exclusive)…

CVE-2025-38693. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00176 (percentile 0.06677), scored 19-Oct-2026.

Affected technology

linux kernel · from 2.6.39 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

debian linux · 11.0
debian

Linux · 713d54a8bd812229410a1902cd9b332a2a27af9f to before 7a41ecfc3415ebe3b4c44f96b3337691dcf431a3, 713d54a8bd812229410a1902cd9b332a2a27af9f to before b3d77a3fc71c084575d3df4ec6544b3fb6ce587d, 713d54a8bd812229410a1902cd9b332a2a27af9f to before 17b30e5ded062bd74f8ca6f317e1d415a8680665, 713d54a8bd812229410a1902cd9b332a2a27af9f to before 454a443eaa792c8865c861a282fe6d4f596abc3a, 713d54a8bd812229410a1902cd9b332a2a27af9f to before 6bbaec6a036940e22318f0454b50b8000845ab59, 713d54a8bd812229410a1902cd9b332a2a27af9f to before f98132a59ccc59a8b97987363bc99c8968934756, 713d54a8bd812229410a1902cd9b332a2a27af9f to before 99690a494d91a0dc86cebd628da4c62c40552bcb, 713d54a8bd812229410a1902cd9b332a2a27af9f to before 39b06b93f24dff923c4183d564ed28c039150554, 713d54a8bd812229410a1902cd9b332a2a27af9f to before ed0234c8458b3149f15e496b48a1c9874dd24a1b
Linux

Linux · 2.6.39
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: drivers/media/dvb-frontends/dib7000p.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 20-Oct-2026 01:47 UTC

CWE: CWE-476
CCR priority: 22.0 /100 (P4)
CVSS 3.1: 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS: 0.00176 · percentile 0.06677 · 2026-10-19
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-20 01:44:01.123206+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2025-38693.html