P4Verified

CVE-2025-38732: linux kernel from 5.9 (inclusive), before 5.10.241 (exclusive), from 5.11 (inclusive), before 5.15.190 (exclusive)…

CVE-2025-38732. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00176 (percentile 0.06609), scored 14-Oct-2026.

Affected technology

linux kernel · from 5.9 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.44 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.4 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

debian linux · 11.0
debian

Linux · f53b9b0bdc59c0823679f2e3214e0d538f5951b9 to before 7b8b503c06274ef3c6c1a107743f1ec0d0a53ef8, f53b9b0bdc59c0823679f2e3214e0d538f5951b9 to before 82ef97abf22790182f7d433c74960dfd61b99c33, f53b9b0bdc59c0823679f2e3214e0d538f5951b9 to before b7a885ba25960c91db237c3f83b4285156789bce, f53b9b0bdc59c0823679f2e3214e0d538f5951b9 to before a0a3ace2a57887dac1e7c9a724846040c3e31868, f53b9b0bdc59c0823679f2e3214e0d538f5951b9 to before 51e8531371f90bee742c63775c9a568e5d6bf3c5, f53b9b0bdc59c0823679f2e3214e0d538f5951b9 to before b32e1590a8d22cf7d7f965e46d5576051acf8e42, f53b9b0bdc59c0823679f2e3214e0d538f5951b9 to before 91a79b792204313153e1bdbbe5acbfc28903b3a5
Linux

Linux · 5.9
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/ipv4/netfilter/nf_reject_ipv4.c, net/ipv6/netfilter/nf_reject_ipv6.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 15-Oct-2026 09:20 UTC

CCR priority: 22.0 /100 (P4)
CVSS 3.1: 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS: 0.00176 · percentile 0.06609 · 2026-10-14
KEV: no

Provenance

FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2025-38732.html