CVE-2025-38694: linux kernel from 2.6.39 (inclusive), before 5.4.297 (exclusive), from 5.5 (inclusive), before 5.10.241 (exclusive)…

CVE-2025-38694. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00176 (percentile 0.06679), scored 19-Oct-2026.

Affected technology

linux kernel · from 2.6.39 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

debian linux · 11.0
debian

Linux · 713d54a8bd812229410a1902cd9b332a2a27af9f to before bc07cae4f36bb18d5b6a9ed835c1278ca44ec82e, 713d54a8bd812229410a1902cd9b332a2a27af9f to before ce8b7c711b9c4f040b5419729d0972db8e374324, 713d54a8bd812229410a1902cd9b332a2a27af9f to before 529fd5593b721e6f4370c591f5086649ed149ff6, 713d54a8bd812229410a1902cd9b332a2a27af9f to before c33280d6bd668dbdc5a5f07887cc63a52ab4789c, 713d54a8bd812229410a1902cd9b332a2a27af9f to before 09906650484a09b3a4d4b3d3065395856810becd, 713d54a8bd812229410a1902cd9b332a2a27af9f to before 0bb32863426afe0badac25c28d59021f211d0f48, 713d54a8bd812229410a1902cd9b332a2a27af9f to before a0f744d6cdde81d7382e183f77a4080a39b206cd, 713d54a8bd812229410a1902cd9b332a2a27af9f to before 19eb5d8e6aa1169d368a4d69aae5572950deb89d, 713d54a8bd812229410a1902cd9b332a2a27af9f to before ce5cac69b2edac3e3246fee03e8f4c2a1075238b
Linux

Linux · 2.6.39
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: drivers/media/dvb-frontends/dib7000p.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 20-Oct-2026 01:47 UTC

CWE: CWE-476
CCR priority: 22.0 /100 (P4)
CVSS 3.1: 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS: 0.00176 · percentile 0.06679 · 2026-10-19
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-20 01:44:01.123206+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2025-38694.html