CVE-2025-38727: linux kernel 5.4.296, 5.10.240, 5.15.189 (+1 more affected versions); +6 more affected products

Affected technology

linux kernel · from 6.1.146 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.6.99 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.12.39 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.15.7 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16.1 (inclusive), before 6.16.2 (exclusive)
linux

linux kernel · 5.4.296
linux

linux kernel · 5.10.240
linux

linux kernel · 5.15.189
linux

linux kernel · 6.16
linux

linux kernel · 6.16 · update rc6
linux

linux kernel · 6.16 · update rc7
linux

debian linux · 11.0
debian

Linux · 9da025150b7c14a8390fc06aea314c0a4011e82c to before 47d49fd07f86d1f55ea1083287303d237e9e0922, c4ceaac5c5ba0b992ee1dc88e2a02421549e5c98 to before 6bee383ff83352a693d03efdf27cdd80742f71b2, fd69af06101090eaa60b3d216ae715f9c0a58e5b to before f324959ad47e62e3cadaffa65d3cff790fb48529, 76602d8e13864524382b0687dc32cd8f19164d5a to before d42b71a34f6b8a2d5c53df81169b03b8d8b5cf4e, 55baecb9eb90238f60a8350660d6762046ebd3bd to before 346c820ef5135cf062fa3473da955ef8c5fb6929, 4b8e18af7bea92f8b7fb92d40aeae729209db250 to before 44ddd7b1ae0b7edb2c832eb16798c827a05e58f0, cd7ff61bfffd7000143c42bbffb85eeb792466d6 to before 78fcd69d55c5f11d7694c547eca767a1cfd38ec4, ae8f160e7eb24240a2a79fc4c815c6a0d4ee16cc to before e8edc7de688791a337c068693f22e8d8b869df71, ae8f160e7eb24240a2a79fc4c815c6a0d4ee16cc to before 759dfc7d04bab1b0b86113f1164dc1fec192b859, 5.4.296 to before 5.4.297, 5.10.240 to before 5.10.241, 5.15.189 to before 5.15.190, 6.1.146 to before 6.1.149, 6.6.99 to before 6.6.103, 6.12.39 to before 6.12.43, 6.15.7 to before 6.15.11
Linux

Linux · 6.16
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/netlink/af_netlink.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.