CVE-2025-38700: linux kernel from 2.6.27 (inclusive), before 5.4.297 (exclusive), from 5.5 (inclusive), before 5.10.241 (exclusive)…

CVE-2025-38700. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00176 (percentile 0.06677), scored 19-Oct-2026.

Affected technology

linux kernel · from 2.6.27 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

debian linux · 11.0
debian

Linux · 5d91e209fb21fb9cc765729d4c6a85a9fb6c9187 to before f53af99f441ee79599d8df6113a7144d74cf9153, 5d91e209fb21fb9cc765729d4c6a85a9fb6c9187 to before 9ea6d961566c7d762ed0204b06db05756fdda3b6, 5d91e209fb21fb9cc765729d4c6a85a9fb6c9187 to before fd5aad080edb501ab5c84b7623d612d0e3033403, 5d91e209fb21fb9cc765729d4c6a85a9fb6c9187 to before a145c269dc5380c063a20a0db7e6df2995962e9d, 5d91e209fb21fb9cc765729d4c6a85a9fb6c9187 to before 66a373f50b4249d57f5a88c7be9676f9d5884865, 5d91e209fb21fb9cc765729d4c6a85a9fb6c9187 to before 35782c32528d82aa21f84cb5ceb2abd3526a8159, 5d91e209fb21fb9cc765729d4c6a85a9fb6c9187 to before a33d42b7fc24fe03f239fbb0880dd5b4b4b97c19, 5d91e209fb21fb9cc765729d4c6a85a9fb6c9187 to before 2b242ea14386a510010eabfbfc3ce81a101f3802, 5d91e209fb21fb9cc765729d4c6a85a9fb6c9187 to before 3ea3a256ed81f95ab0f3281a0e234b01a9cae605
Linux

Linux · 2.6.27
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: drivers/scsi/libiscsi.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 20-Oct-2026 01:47 UTC

CWE: CWE-476
CCR priority: 22.0 /100 (P4)
CVSS 3.1: 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS: 0.00176 · percentile 0.06677 · 2026-10-19
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-20 01:44:01.123206+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2025-38700.html