CVE-2021-47146, CVE-2021-47269, CVE-2021-47385 +15 more CVEs: linux kernel before 5.10.227 (exclusive), from 5.11 (inclusive), before 5.15.168 (exclusive)…

CVE-2021-47146

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2021-47269

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2021-47385

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2021-47634

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2022-49026

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49935

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50067

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50095

Affected technology

linux kernel · before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.57 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.4 (exclusive)
linux

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 713adaf0ecfc49405f6e5d9e409d984f628de818, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7022a517bf1ca37ef5a474365bcc5eafd345a13a, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before e80eadb3604a92d2d086e956b8b2692b699d4d0a, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a195a42dd25ca4f12489687065d00be64939409f, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 3e799fa463508abe7a738ce5d0f62a8dfd05262a, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2a777679b8ccd09a9a65ea0716ef10365179caac
Linux

Linux · 2.6.12
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: drivers/infiniband/core/mad.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50179

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-53112

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-53217

Affected technology

linux kernel · from 2.6.38 (inclusive), before 4.19.325 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.287 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.231 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.174 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.120 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.64 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.11 (exclusive)
linux

linux kernel · from 6.12 (inclusive), before 6.12.2 (exclusive)
linux

Linux · dcbeaa68dbbdacbbb330a86c7fc95a28473fc209 to before d9a0d1f6e15859ea7a86a327f28491e23deaaa62, dcbeaa68dbbdacbbb330a86c7fc95a28473fc209 to before cac1405e3ff6685a438e910ad719e0cf06af90ee, dcbeaa68dbbdacbbb330a86c7fc95a28473fc209 to before 752a75811f27300fe8131b0a1efc91960f6f88e7, dcbeaa68dbbdacbbb330a86c7fc95a28473fc209 to before c5d90f9302742985a5078e42ac38de42c364c44a, dcbeaa68dbbdacbbb330a86c7fc95a28473fc209 to before 0c3b0e326f838787d229314d4de83af9c53347e8, dcbeaa68dbbdacbbb330a86c7fc95a28473fc209 to before eb51733ae5fc73d95bd857d5da26f9f65b202a79, dcbeaa68dbbdacbbb330a86c7fc95a28473fc209 to before 03178cd8f67227015debb700123987fe96275cd1, dcbeaa68dbbdacbbb330a86c7fc95a28473fc209 to before 4a4ffc1aa9d618e41ad9151f40966e402e58a5a2, dcbeaa68dbbdacbbb330a86c7fc95a28473fc209 to before 1e02c641c3a43c88cecc08402000418e15578d38
Linux

Linux · 2.6.38
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

Component: Not specified by the source
File: fs/nfsd/nfs4callback.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-21715

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-21722

Affected technology

linux kernel · from 3.10 (inclusive), before 5.4.291 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.235 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.179 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.129 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.12.13 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.13.2 (exclusive)
linux

Linux · 8c26c4e2694a163d525976e804d81cd955bbb40c to before 7d0544bacc11d6aa26ecd7debf9353193c7a3328, 8c26c4e2694a163d525976e804d81cd955bbb40c to before 4d042811c72f71be7c14726db2c72b67025a7cb5, 8c26c4e2694a163d525976e804d81cd955bbb40c to before f51ff43c4c5a6c8e72d0aca89e4d5e688938412f, 8c26c4e2694a163d525976e804d81cd955bbb40c to before 19296737024cd220a1d6590bf4c092bca8c99497, 8c26c4e2694a163d525976e804d81cd955bbb40c to before 8458c686d50a804611b97038dd6e75a474ac2221, 8c26c4e2694a163d525976e804d81cd955bbb40c to before 1098bb8d52419d262a3358d099a1598a920b730f, 8c26c4e2694a163d525976e804d81cd955bbb40c to before 557ccf5e49f1fb848a29698585bcab2e50a597ef, 8c26c4e2694a163d525976e804d81cd955bbb40c to before ca76bb226bf47ff04c782cacbd299f12ddee1ec1
Linux

Linux · 3.10
Linux

Component: Not specified by the source
File: fs/nilfs2/page.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-21811

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-21855

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38666

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-39964

Affected technology

linux kernel · from 2.6.38 (inclusive), before 5.10.245 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.194 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.154 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.108 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.49 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.9 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

linux kernel · 6.17 · update rc4
linux

linux kernel · 6.17 · update rc5
linux

linux kernel · 6.17 · update rc6
linux

simatic s7-1500 cpu 1518-4 pn/dp mfp firmware · from 3.1.6 (inclusive)
siemens

simatic s7-1500 cpu 1518f-4 pn/dp mfp firmware · from 3.1.6 (inclusive)
siemens

Linux · 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 to before 0f28c4adbc4a97437874c9b669fd7958a8c6d6ce, 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 to before e4c1ec11132ec466f7362a95f36a506ce4dc08c9, 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 to before 1f323a48e9b5ebfe6dc7d130fdf5c3c0e92a07c8, 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 to before 7c4491b5644e3a3708f3dbd7591be0a570135b84, 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 to before 9aee87da5572b3a14075f501752e209801160d3d, 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 to before 45bcf60fe49b37daab1acee57b27211ad1574042, 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 to before 1b34cbbf4f011a121ef7b2d7d6e6920a036d5285
Linux

Linux · 2.6.38
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: crypto/af_alg.c, include/crypto/if_alg.h

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-40018

Affected technology

Linux · 61b1ab4583e275af216c8454b9256de680499b19 to before 8a6ecab3847c213ce2855b0378e63ce839085de3, 61b1ab4583e275af216c8454b9256de680499b19 to before 421b1ae1574dfdda68b835c15ac4921ec0030182, 61b1ab4583e275af216c8454b9256de680499b19 to before 1d79471414d7b9424d699afff2aa79fff322f52d, 61b1ab4583e275af216c8454b9256de680499b19 to before 53717f8a4347b78eac6488072ad8e5adbaff38d9, 61b1ab4583e275af216c8454b9256de680499b19 to before 8cbe2a21d85727b66d7c591fd5d83df0d8c4f757, 61b1ab4583e275af216c8454b9256de680499b19 to before dc1a481359a72ee7e548f1f5da671282a7c13b8f, 61b1ab4583e275af216c8454b9256de680499b19 to before a343811ef138a265407167294275201621e9ebb2, 61b1ab4583e275af216c8454b9256de680499b19 to before 134121bfd99a06d44ef5ba15a9beb075297c0821
Linux

Linux · 2.6.39
Linux

Component: Not specified by the source
File: net/netfilter/ipvs/ip_vs_ftp.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.