CVE-2021-46959, CVE-2021-47150, CVE-2021-47163 +29 more CVEs: linux kernel 2.6.25; +9 more affected products

CVE-2021-46959

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2021-47150

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2021-47163

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2021-47191

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2021-47219

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2021-47245

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2021-47500

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2021-47506

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2021-47587

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2022-23041

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2023-52741

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-26689

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-26915

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-26974

Affected technology

linux kernel · from 3.17 (inclusive), before 4.19.312 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.274 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.215 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.154 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.84 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.24 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.7.12 (exclusive)
linux

linux kernel · from 6.8 (inclusive), before 6.8.3 (exclusive)
linux

debian linux · 10.0
debian

Linux · d8cba25d2c68992a6e7c1d329b690a9ebe01167d to before daba62d9eeddcc5b1081be7d348ca836c83c59d7, d8cba25d2c68992a6e7c1d329b690a9ebe01167d to before 8e81cd58aee14a470891733181a47d123193ba81, d8cba25d2c68992a6e7c1d329b690a9ebe01167d to before d03092550f526a79cf1ade7f0dfa74906f39eb71, d8cba25d2c68992a6e7c1d329b690a9ebe01167d to before 4ae5a97781ce7d6ecc9c7055396535815b64ca4f, d8cba25d2c68992a6e7c1d329b690a9ebe01167d to before 226fc408c5fcd23cc4186f05ea3a09a7a9aef2f7, d8cba25d2c68992a6e7c1d329b690a9ebe01167d to before 8a5a7611ccc7b1fba8d933a9f22a2e76859d94dc, d8cba25d2c68992a6e7c1d329b690a9ebe01167d to before 0c2cf5142bfb634c0ef0a1a69cdf37950747d0be, d8cba25d2c68992a6e7c1d329b690a9ebe01167d to before bb279ead42263e9fb09480f02a4247b2c287d828, d8cba25d2c68992a6e7c1d329b690a9ebe01167d to before 7d42e097607c4d246d99225bf2b195b6167a210c
Linux

Linux · 3.17
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
Function: scheduling, that
File: drivers/crypto/intel/qat/qat_common/adf_aer.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-26996

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-35864

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-36934

Affected technology

linux kernel · from 3.3 (inclusive), before 4.19.314 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.276 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.217 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.159 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.91 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.31 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.8.10 (exclusive)
linux

linux kernel · 6.9 · update rc1
linux

linux kernel · 6.9 · update rc2
linux

linux kernel · 6.9 · update rc3
linux

linux kernel · 6.9 · update rc4
linux

linux kernel · 6.9 · update rc5
linux

linux kernel · 6.9 · update rc6
linux

debian linux · 10.0
debian

Linux · 7afc5dbde09104b023ce04465ba71aaba0fc4346 to before bd502ba81cd1d515deddad7dbc6b812b14b97147, 7afc5dbde09104b023ce04465ba71aaba0fc4346 to before 80578ec10335bc15ac35fd1703c22aab34e39fdd, 7afc5dbde09104b023ce04465ba71aaba0fc4346 to before 6f0f19b79c085cc891c418b768f26f7004bd51a4, 7afc5dbde09104b023ce04465ba71aaba0fc4346 to before 0f560240b4cc25d3de527deb257cdf072c0102a9, 7afc5dbde09104b023ce04465ba71aaba0fc4346 to before 06cb37e2ba6441888f24566a997481d4197b4e32, 7afc5dbde09104b023ce04465ba71aaba0fc4346 to before e19478763154674c084defc62ae0d64d79657f91, 7afc5dbde09104b023ce04465ba71aaba0fc4346 to before 1518b2b498a0109eb6b15755169d3b6607356b35, 7afc5dbde09104b023ce04465ba71aaba0fc4346 to before 8c34096c7fdf272fd4c0c37fe411cd2e3ed0ee9f
Linux

Linux · 3.3
Linux

RUGGEDCOM RST2428P · 0 to before V3.1
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.1
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

Component: Not specified by the source
File: drivers/net/ethernet/brocade/bna/bnad_debugfs.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-46771

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-46780

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49944

Affected technology

linux kernel · from 2.6.30 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

Linux · 5e8f3f703ae4e4af65e2695e486b3cd198328863 to before 89bbead9d897c77d0b566349c8643030ff2abeba, 5e8f3f703ae4e4af65e2695e486b3cd198328863 to before 0e4e2e60556c6ed00e8450b720f106a268d23062, 5e8f3f703ae4e4af65e2695e486b3cd198328863 to before dd70c8a89ef99c3d53127fe19e51ef47c3f860fa, 5e8f3f703ae4e4af65e2695e486b3cd198328863 to before e7a8442195e8ebd97df467ce4742980ab57edcce, 5e8f3f703ae4e4af65e2695e486b3cd198328863 to before 9230a59eda0878d7ecaa901d876aec76f57bd455, 5e8f3f703ae4e4af65e2695e486b3cd198328863 to before 7f64cb5b4d8c872296eda0fdce3bcf099eec7aa7, 5e8f3f703ae4e4af65e2695e486b3cd198328863 to before f032e1dac30b3376c7d6026fb01a8c403c47a80d, 5e8f3f703ae4e4af65e2695e486b3cd198328863 to before e914bf68dab88815a7ae7b7a3a5e8913c8ff14a5, 5e8f3f703ae4e4af65e2695e486b3cd198328863 to before 8beee4d8dee76b67c75dc91fd8185d91e845c160
Linux

Linux · 2.6.30
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: net/sctp/socket.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50237

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50256

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-53063

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (OSV, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

OSV’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-53066

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-53140

Affected technology

linux kernel · from 4.4.38 (inclusive), before 4.5 (exclusive)
linux

linux kernel · from 4.8.14 (inclusive), before 4.9 (exclusive)
linux

linux kernel · from 4.9 (inclusive), before 6.1.119 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.63 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.10 (exclusive)
linux

Linux · ed5d7788a934a4b6d6d025e948ed4da496b4f12e to before 114a61d8d94ae3a43b82446cf737fd757021b834, ed5d7788a934a4b6d6d025e948ed4da496b4f12e to before 598c956b62699c3753929602560d8df322e60559, ed5d7788a934a4b6d6d025e948ed4da496b4f12e to before 6e3f2c512d2b7dbd247485b1dd9e43e4210a18f4, ed5d7788a934a4b6d6d025e948ed4da496b4f12e to before d2fab3d66cc16cfb9e3ea1772abe6b79b71fa603, ed5d7788a934a4b6d6d025e948ed4da496b4f12e to before 4e87a52133284afbd40fb522dbf96e258af52a98, ed5d7788a934a4b6d6d025e948ed4da496b4f12e to before bbc769d2fa1b8b368c5fbe013b5b096afa3c05ca, ed5d7788a934a4b6d6d025e948ed4da496b4f12e to before 176c41b3ca9281a9736b67c6121b03dbf0c8c08f, ed5d7788a934a4b6d6d025e948ed4da496b4f12e to before 1904fb9ebf911441f90a68e96b22aa73e4410505, baaf0c65bc8ea9c7a404b09bc8cc3b8a1e4f18df, 25d9b4bb64ea964769087fc5ae09aee9c838d759, 4.4.38 to before 4.5, 4.8.14 to before 4.9
Linux

Linux · 4.9
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

Component: Not specified by the source
File: net/netlink/af_netlink.c, net/netlink/af_netlink.h

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

But also means that the user can close the socket without getting to the end of the dump. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high.

CVE-2024-53173

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56598

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56631

Affected technology

linux kernel · from 3.16.85 (inclusive), before 6.6.66 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.5 (exclusive)
linux

linux kernel · 6.13 · update rc1
linux

Linux · cc833acbee9db5ca8c6162b015b4c93863c6f821 to before e19acb1926c4a1f30ee1ec84d8afba2d975bd534, cc833acbee9db5ca8c6162b015b4c93863c6f821 to before 285ce1f89f8d414e7eecab5ef5118cd512596318, cc833acbee9db5ca8c6162b015b4c93863c6f821 to before 198b89dd5a595ee3f96e5ce5c448b0484cd0e53c, cc833acbee9db5ca8c6162b015b4c93863c6f821 to before 275b8347e21ab8193e93223a8394a806e4ba8918, cc833acbee9db5ca8c6162b015b4c93863c6f821 to before 59b30afa578637169e2819536bb66459fdddc39d, cc833acbee9db5ca8c6162b015b4c93863c6f821 to before 1f5e2f1ca5875728fcf62bc1a054707444ab4960, cc833acbee9db5ca8c6162b015b4c93863c6f821 to before f10593ad9bc36921f623361c9e3dd96bd52d85ee, 3a27c0defb0315760100f8b1adc7c4acbe04c884, 3.16.85 to before 3.17
Linux

Linux · 3.17
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
Function: kref_put
File: drivers/scsi/sg.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-56642

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56650

Affected technology

linux kernel · from 2.6.30 (inclusive), before 5.4.287 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.231 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.174 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.120 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.66 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.5 (exclusive)
linux

linux kernel · 6.13 · update rc1
linux

Linux · 268cb38e1802db560c73167e643f14a3dcb4b07c to before 147a42bb02de8735cb08476be6d0917987d022c2, 268cb38e1802db560c73167e643f14a3dcb4b07c to before ad28612ebae1fcc1104bd432e99e99d87f6bfe09, 268cb38e1802db560c73167e643f14a3dcb4b07c to before 36a9d94dac28beef6b8abba46ba8874320d3e800, 268cb38e1802db560c73167e643f14a3dcb4b07c to before ab9916321c95f5280b72b4c5055e269f98627efe, 268cb38e1802db560c73167e643f14a3dcb4b07c to before a9bcc0b70d9baf3ff005874489a0dc9d023b54c3, 268cb38e1802db560c73167e643f14a3dcb4b07c to before c40c96d98e536fc1daaa125c2332b988615e30a4, 268cb38e1802db560c73167e643f14a3dcb4b07c to before 04317f4eb2aad312ad85c1a17ad81fe75f1f9bc7
Linux

Linux · 2.6.30
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: net/netfilter/xt_LED.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-56770

Affected technology

linux kernel · from 3.3 (inclusive), before 5.4.288 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.232 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.175 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.121 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.67 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.6 (exclusive)
linux

linux kernel · 6.13 · update rc1
linux

linux kernel · 6.13 · update rc2
linux

Linux · 50612537e9ab29693122fab20fc1eed235054ffe to before 83c6ab12f08dcc09d4c5ac86fdb89736b28f1d31, 50612537e9ab29693122fab20fc1eed235054ffe to before 216509dda290f6db92c816dd54b83c1df9da9e76, 50612537e9ab29693122fab20fc1eed235054ffe to before c2047b0e216c8edce227d7c42f99ac2877dad0e4, 50612537e9ab29693122fab20fc1eed235054ffe to before 10df49cfca73dfbbdb6c4150d859f7e8926ae427, 50612537e9ab29693122fab20fc1eed235054ffe to before 3824c5fad18eeb7abe0c4fc966f29959552dca3e, 50612537e9ab29693122fab20fc1eed235054ffe to before 356078a5c55ec8d2061fcc009fb8599f5b0527f9, 50612537e9ab29693122fab20fc1eed235054ffe to before f8d4bc455047cf3903cd6f85f49978987dbb3027
Linux

Linux · 3.3
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: net/sched/sch_netem.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-21971

Affected technology

linux kernel · from 2.6.26 (inclusive), before 5.4.292 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.236 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.180 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.132 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.84 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.20 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.13.8 (exclusive)
linux

linux kernel · 2.6.25
linux

linux kernel · 6.14 · update rc1
linux

linux kernel · 6.14 · update rc2
linux

linux kernel · 6.14 · update rc3
linux

linux kernel · 6.14 · update rc4
linux

linux kernel · 6.14 · update rc5
linux

linux kernel · 6.14 · update rc6
linux

Linux · 066a3b5b2346febf9a655b444567b7138e3bb939 to before e05d9938b1b0ac40b6054cc5fa0ccbd9afd5ed4c, 066a3b5b2346febf9a655b444567b7138e3bb939 to before 7a82fe67a9f4d7123d8e5ba8f0f0806c28695006, 066a3b5b2346febf9a655b444567b7138e3bb939 to before 003d92c91cdb5a64b25a9a74cb8543aac9a8bb48, 066a3b5b2346febf9a655b444567b7138e3bb939 to before e5ee00607bbfc97ef1526ea95b6b2458ac9e7cb7, 066a3b5b2346febf9a655b444567b7138e3bb939 to before 78533c4a29ac3aeddce4b481770beaaa4f3bfb67, 066a3b5b2346febf9a655b444567b7138e3bb939 to before 5c3ca9cb48b51bd72bf76b8b05e24f3cd53db5e7, 066a3b5b2346febf9a655b444567b7138e3bb939 to before 94edfdfb9505ab608e86599d1d1e38c83816fc1c, 066a3b5b2346febf9a655b444567b7138e3bb939 to before 0c3057a5a04d07120b3d0ec9c79568fceb9c921e
Linux

Linux · 2.6.25
Linux

Component: Not specified by the source
Function: qdisc_tree_reduce_backlog
File: net/sched/sch_api.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.