CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2025-38721: linux kernel 2.6.18; +6 more affected products

CVE-2025-38721. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.0017 (percentile 0.05927), scored 14-Oct-2026.

Affected technology

linux kernel · from 2.6.19 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

linux kernel · 2.6.18
linux

linux kernel · 2.6.18 · update rc5
linux

linux kernel · 2.6.18 · update rc6
linux

linux kernel · 2.6.18 · update rc7
linux

linux kernel · 6.17 · update rc1
linux

debian linux · 11.0
debian

Linux · d205dc40798d97d63ad348bfaf7394f445d152d4 to before 586892e341fbf698e7cbaca293e1353957db725a, d205dc40798d97d63ad348bfaf7394f445d152d4 to before 962518c6ca9f9a13df099cafa429f72f68ad61f0, d205dc40798d97d63ad348bfaf7394f445d152d4 to before 19b909a4b1452fb97e477d2f08b97f8d04095619, d205dc40798d97d63ad348bfaf7394f445d152d4 to before 41462f4cfc583513833f87f9ee55d12da651a7e3, d205dc40798d97d63ad348bfaf7394f445d152d4 to before 30cf811058552b8cd0e98dff677ef3f89d6d34ce, d205dc40798d97d63ad348bfaf7394f445d152d4 to before a2cb4df7872de069f809de2f076ec8e54d649fe3, d205dc40798d97d63ad348bfaf7394f445d152d4 to before e14f72aa66c029db106921d621edcedef68e065b, d205dc40798d97d63ad348bfaf7394f445d152d4 to before a62d6aa3f31f216b637a4c71b7a8bfc7c57f049b, d205dc40798d97d63ad348bfaf7394f445d152d4 to before de788b2e6227462b6dcd0e07474e72c089008f74
Linux

Linux · 2.6.18
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/netfilter/nf_conntrack_netlink.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CCR priority
22.0 /100 (P4)
CVSS 3.1
5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS
0.0017 · percentile 0.05927 · 2026-10-14
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2025-38721.html