CVE-2025-38710

Exploitation

Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.

SSVC decision

Not assessed by CISA

EPSS probability

0.15% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 5.1% of scored records. A rank, not a probability.

NVD base score

5.5 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-07-30.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2025-09-04 15:33Z1 YR AGO

Last updated

2026-08-05 12:04Z1 MO AGO

Reserved

2025-04-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

• CWE-1285Improper Validation of Specified Index, Position, or Offset in InputBase

Data version

5.2

Document digest

e6d3714713b02c7926e0488e8652a5c0c6e8dbdab78d7fba5e70f23a3ebe8172

• git.kernel.orghttps://git.kernel.org/stable/c/076e992752e4b24178918f748d75597c80a408d2
• git.kernel.orghttps://git.kernel.org/stable/c/366183911b153e9b8cf758e1414e1154d7569337
• git.kernel.orghttps://git.kernel.org/stable/c/112bb60cd0e254a369e95aa9941a694ffeca089f
• git.kernel.orghttps://git.kernel.org/stable/c/cddea0c721106ea480371412d8de21705eb27376
• git.kernel.orghttps://git.kernel.org/stable/c/53a0249d68a210c16e961b83adfa82f94ee0a53d
• git.kernel.orghttps://git.kernel.org/stable/c/b5f46951e62377b6e406fadc18bc3c5bdf1632a7
• git.kernel.orghttps://git.kernel.org/stable/c/9680c58675b82348ab84d387e4fa727f7587e1a0
• git.kernel.orghttps://git.kernel.org/stable/c/557c024ca7250bb65ae60f16c02074106c2f197b