CVE-2025-38715: linux kernel 2.6.12; +3 more affected products

Affected technology

linux kernel · from 2.6.12.1 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

linux kernel · 2.6.12
linux

linux kernel · 2.6.12 · update rc2
linux

linux kernel · 2.6.12 · update rc3
linux

linux kernel · 2.6.12 · update rc4
linux

linux kernel · 2.6.12 · update rc5
linux

debian linux · 11.0
debian

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before e7d2dc2421e821e4045775e6dc226378328de6f6, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 67ecc81f6492275c9c54280532f558483c99c90e, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a1a60e79502279f996e55052f50cc14919020475, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before fe2891a9c43ab87d1a210d61e6438ca6936e2f62, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 384a66b89f9540a9a8cb0f48807697dfabaece4c, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before efc095b35b23297e419c2ab4fc1ed1a8f0781a29, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before fc7f732984ec91f30be3e574e0644066d07f2b78, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before eec522fd0d28106b14a59ab2d658605febe4a3bb, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a431930c9bac518bf99d6b1da526a7f37ddee8d8
Linux

Linux · 2.6.12
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: fs/hfs/bnode.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.