CVE-2025-38699: linux kernel 2.6.32; +3 more affected products

Affected technology

linux kernel · from 2.6.33 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

linux kernel · 2.6.32
linux

linux kernel · 2.6.32 · update rc4
linux

linux kernel · 2.6.32 · update rc5
linux

linux kernel · 2.6.32 · update rc6
linux

linux kernel · 2.6.32 · update rc7
linux

linux kernel · 2.6.32 · update rc8
linux

debian linux · 11.0
debian

Linux · 7725ccfda59715ecf8f99e3b520a0b84cc2ea79e to before 684c92bb08a25ed3c0356bc7eb532ed5b19588dd, 7725ccfda59715ecf8f99e3b520a0b84cc2ea79e to before 9337c2affbaebe00b75fdf84ea0e2fcf93c140af, 7725ccfda59715ecf8f99e3b520a0b84cc2ea79e to before ba024d92564580bb90ec367248ace8efe16ce815, 7725ccfda59715ecf8f99e3b520a0b84cc2ea79e to before 8e03dd9fadf76db5b9799583074a1a2a54f787f1, 7725ccfda59715ecf8f99e3b520a0b84cc2ea79e to before 39cfe2c83146aad956318f866d0ee471b7a61fa5, 7725ccfda59715ecf8f99e3b520a0b84cc2ea79e to before 13f613228cf3c96a038424cd97aa4d6aadc66294, 7725ccfda59715ecf8f99e3b520a0b84cc2ea79e to before 8456f862cb95bcc3a831e1ba87c0c17068be0f3f, 7725ccfda59715ecf8f99e3b520a0b84cc2ea79e to before 50d9bd48321038bd6e15af5a454bbcd180cf6f80, 7725ccfda59715ecf8f99e3b520a0b84cc2ea79e to before add4c4850363d7c1b72e8fce9ccb21fdd2cf5dc9
Linux

Linux · 2.6.32
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
Function: fails
File: drivers/scsi/bfa/bfad_im.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.