CVE-2025-38711: linux kernel from 5.15 (inclusive), before 5.15.190 (exclusive), from 5.16 (inclusive), before 6.1.149 (exclusive)…

Affected technology

linux kernel · from 5.15 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

debian linux · 11.0
debian

Linux · 0626e6641f6b467447c81dd7678a69c66f7746cf to before 9d5012ffe14120f978ee34aef4df3d6cb026b7c4, 0626e6641f6b467447c81dd7678a69c66f7746cf to before ac98d54630d5b52e3f684d872f0d82c06c418ea9, 0626e6641f6b467447c81dd7678a69c66f7746cf to before 1e858a7a51c7b8b009d8f246de7ceb7743b44a71, 0626e6641f6b467447c81dd7678a69c66f7746cf to before 814cfdb6358d9b84fcbec9918c8f938cc096a43a, 0626e6641f6b467447c81dd7678a69c66f7746cf to before a7dddd62578c2eb6cb28b8835556a121b5157323, 0626e6641f6b467447c81dd7678a69c66f7746cf to before a726fef6d7d4cfc365d3434e3916dbfe78991a33, 0626e6641f6b467447c81dd7678a69c66f7746cf to before d5fc1400a34b4ea5e8f2ce296ea12bf8c8421694
Linux

Linux · 5.15
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: fs/smb/server/smb2pdu.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.