CVE-2025-38697: linux kernel 2.6.12; +3 more affected products

Affected technology

linux kernel · from 2.6.12.1 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

linux kernel · 2.6.12
linux

linux kernel · 2.6.12 · update rc2
linux

linux kernel · 2.6.12 · update rc3
linux

linux kernel · 2.6.12 · update rc4
linux

linux kernel · 2.6.12 · update rc5
linux

debian linux · 11.0
debian

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 5bdb9553fb134fd52ec208a8b378120670f6e784, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a4f199203f79ca9cd7355799ccb26800174ff093, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1467a75819e41341cd5ebd16faa2af1ca3c8f4fe, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 49ea46d9025aa1914b24ea957636cbe4367a7311, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 173cfd741ad7073640bfb7e2344c2a0ee005e769, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c8ca21a2836993d7cb816668458e05e598574e55, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2dd05f09cc323018136a7ecdb3d1007be9ede27f, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 30e19a884c0b11f33821aacda7e72e914bec26ef, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c214006856ff52a8ff17ed8da52d50601d54f9ce
Linux

Linux · 2.6.12
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: fs/jfs/jfs_dmap.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.