Get real-time updates on Telegram
CVE-2025-38702: linux kernel 2.6.12; +6 more affected products
CVE-2025-38702. CVSS 3.1 base score 7.8 (HIGH, NVD). EPSS 0.00191 (percentile 0.08215), scored 19-Oct-2026.
Affected technology
linux kernel · from 2.6.12.1 (inclusive), before 6.1.149 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux
linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux
linux kernel · 2.6.12
linux
linux kernel · 2.6.12 · update rc2
linux
linux kernel · 2.6.12 · update rc3
linux
linux kernel · 2.6.12 · update rc4
linux
linux kernel · 2.6.12 · update rc5
linux
debian linux · 11.0
debian
Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 5c3f5a25c62230b7965804ce7a2e9305c3ca3961, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before cbe740de32bb0fb7a5213731ff5f26ea6718fca3, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 806f85bdd3a60187c21437fc51baace11f659f35, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2828a433c7d7a05b6f27c8148502095101dd0b09, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 248b2aab9b2af5ecf89d9d7955a2ff20c4b4a399, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 523b84dc7ccea9c4d79126d6ed1cf9033cf83b05
Linux
Linux · 2.6.12
Linux
SIMATIC CN 4100 · 0 to before V5.0
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens
Component: Not specified by the source
File: drivers/video/fbdev/core/fbmem.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-787
- CCR priority
- 31.2 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · NVD
- EPSS
- 0.00191 · percentile 0.08215 · 2026-10-19
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-20 01:44:01.123206+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-38702.html