CVE-2025-38713: linux kernel 2.6.12; +3 more affected products

Affected technology

linux kernel · from 2.6.12.1 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

linux kernel · 2.6.12
linux

linux kernel · 2.6.12 · update rc2
linux

linux kernel · 2.6.12 · update rc3
linux

linux kernel · 2.6.12 · update rc4
linux

linux kernel · 2.6.12 · update rc5
linux

debian linux · 11.0
debian

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 73f7da507d787b489761a0fa280716f84fa32b2f, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 76a4c6636a69d69409aa253b049b1be717a539c5, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ccf0ad56a779e6704c0b27f555dec847f50c7557, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 13604b1d7e7b125fb428cddbec6b8d92baad25d5, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 291bb5d931c6f3cd7227b913302a17be21cf53b0, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f7534cbfac0a9ffa4fa17cacc6e8b6446dae24ee, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6f93694bcbc2c2ab3e01cd8fba2f296faf34e6b9, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1ca69007e52a73bd8b84b988b61b319816ca8b01, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 94458781aee6045bd3d0ad4b80b02886b9e2219b
Linux

Linux · 2.6.12
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: fs/hfsplus/unicode.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.