CVE-2025-38718: linux kernel from 4.8 (inclusive), before 5.4.297 (exclusive), from 5.5 (inclusive), before 5.10.241 (exclusive), from…

Affected technology

linux kernel · from 4.8 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

debian linux · 11.0
debian

Linux · 90017accff61ae89283ad9a51f9ac46ca01633fb to before d0194e391bb493aa6cec56d177b14df6b29188d5, 90017accff61ae89283ad9a51f9ac46ca01633fb to before 03d0cc6889e02420125510b5444b570f4bbf53d5, 90017accff61ae89283ad9a51f9ac46ca01633fb to before cd0e92bb2b7542fb96397ffac639b4f5b099d0cb, 90017accff61ae89283ad9a51f9ac46ca01633fb to before 4506bcaabe004d07be8ff09116a3024fbd6aa965, 90017accff61ae89283ad9a51f9ac46ca01633fb to before ea094f38d387d1b0ded5dee4a3e5720aa4ce0139, 90017accff61ae89283ad9a51f9ac46ca01633fb to before 7d757f17bc2ef2727994ffa6d5d6e4bc4789a770, 90017accff61ae89283ad9a51f9ac46ca01633fb to before fc66772607101bd2030a4332b3bd0ea3b3605250, 90017accff61ae89283ad9a51f9ac46ca01633fb to before 1bd5214ea681584c5886fea3ba03e49f93a43c0e, 90017accff61ae89283ad9a51f9ac46ca01633fb to before fd60d8a086191fe33c2d719732d2482052fa6805
Linux

Linux · 4.8
Linux

Component: Not specified by the source
File: net/sctp/input.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.