CVE-2025-38714: linux kernel 2.6.12; +3 more affected products

Affected technology

linux kernel · from 2.6.13 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

linux kernel · 2.6.12
linux

linux kernel · 2.6.12 · update rc2
linux

linux kernel · 2.6.12 · update rc3
linux

linux kernel · 2.6.12 · update rc4
linux

linux kernel · 2.6.12 · update rc5
linux

debian linux · 11.0
debian

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 032f7ed6717a4cd3714f9801be39fdfc7f1c7644, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ffee8a7bed0fbfe29da239a922b59c5db897c613, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 5ab59229bef6063edf3a6fc2e3e3fd7cd2181b29, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a2abd574d2fe22b8464cf6df5abb6f24d809eac0, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8583d067ae22b7f32ce5277ca5543ac8bf86a3e5, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 475d770c19929082aab43337e6c077d0e2043df3, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 291b7f2538920aa229500dbdd6c5f0927a51bc8b, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7fa4cef8ea13b37811287ef60674c5fd1dd02ee6, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c80aa2aaaa5e69d5219c6af8ef7e754114bd08d2
Linux

Linux · 2.6.12
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: fs/hfsplus/bnode.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.