CYBER CODE RED

Get real-time updates on Telegram

P4

CVE-2025-38702: linux kernel 2.6.12; +6 more affected products

CVE-2025-38702. CVSS 3.1 base score 7.8 (HIGH, NVD). EPSS 0.00191 (percentile 0.08215), scored 19-Oct-2026.

Affected technology

linux kernel · from 2.6.12.1 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

linux kernel · 2.6.12
linux

linux kernel · 2.6.12 · update rc2
linux

linux kernel · 2.6.12 · update rc3
linux

linux kernel · 2.6.12 · update rc4
linux

linux kernel · 2.6.12 · update rc5
linux

debian linux · 11.0
debian

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 5c3f5a25c62230b7965804ce7a2e9305c3ca3961, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before cbe740de32bb0fb7a5213731ff5f26ea6718fca3, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 806f85bdd3a60187c21437fc51baace11f659f35, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2828a433c7d7a05b6f27c8148502095101dd0b09, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 248b2aab9b2af5ecf89d9d7955a2ff20c4b4a399, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 523b84dc7ccea9c4d79126d6ed1cf9033cf83b05
Linux

Linux · 2.6.12
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

Component: Not specified by the source
File: drivers/video/fbdev/core/fbmem.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-787
CCR priority
31.2 /100 (P4)
CVSS 3.1
7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · NVD
EPSS
0.00191 · percentile 0.08215 · 2026-10-19
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2025-38702.html