CVE-2021-47385, CVE-2022-49026, CVE-2022-49390 +30 more CVEs: linux kernel from 4.19.272 (inclusive), before 4.19.317 (exclusive), from 5.4.231 (inclusive)…

CVE-2021-47385

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2022-49026

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2022-49390

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2023-52574

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2023-52650

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-41006

Affected technology

linux kernel · from 4.19.272 (inclusive), before 4.19.317 (exclusive)
linux

linux kernel · from 5.4.231 (inclusive), before 5.4.279 (exclusive)
linux

linux kernel · from 5.10.166 (inclusive), before 5.10.221 (exclusive)
linux

linux kernel · from 5.15.91 (inclusive), before 5.15.162 (exclusive)
linux

linux kernel · from 6.1.9 (inclusive), before 6.1.96 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.36 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.9.7 (exclusive)
linux

linux kernel · 6.10 · update rc1
linux

linux kernel · 6.10 · update rc2
linux

linux kernel · 6.10 · update rc3
linux

linux kernel · 6.10 · update rc4
linux

Linux · a31caf5779ace8fa98b0d454133808e082ee7a1b to before d616876256b38ecf9a1a1c7d674192c5346bc69c, fe9b9e621cebe6b7e83f7e954c70f8bb430520e5 to before e07a9c2a850cdebf625e7a1b8171bd23a8554313, 7de16d75b20ab13b75a7291f449a1b00090edfea to before 5391f9db2cab5ef1cb411be1ab7dbec728078fba, d2d3ab1b1de3302de2c85769121fd4f890e47ceb to before 280cf1173726a7059b628c610c71050d5c0b6937, 51e394c6f81adbfe7c34d15f58b3d4d44f144acf to before a02fd5d775cf9787ee7698c797e20f2fa13d2e2b, 409db27e3a2eb5e8ef7226ca33be33361b3ed1c9 to before b6ebe4fed73eedeb73f4540f8edc4871945474c8, 409db27e3a2eb5e8ef7226ca33be33361b3ed1c9 to before d377f5a28332954b19e373d36823e59830ab1712, 409db27e3a2eb5e8ef7226ca33be33361b3ed1c9 to before 0b9130247f3b6a1122478471ff0e014ea96bb735, e666990abb2e42dd4ba979b4706280a3664cfae7, 4.19.272 to before 4.19.317, 5.4.231 to before 5.4.279, 5.10.166 to before 5.10.221, 5.15.91 to before 5.15.162, 6.1.9 to before 6.1.96, 4.14.305 to before 4.15
Linux

Linux · 6.2
Linux

RUGGEDCOM RST2428P · 0 to before V3.1
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.1
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
Function: has
File: net/netrom/nr_timer.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49935

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49963

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50006

Affected technology

linux kernel · before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

Linux · e8238f9a8339b3578c85e4192a7a23bc2bdc0333 to before 4192adefc9c570698821c5eb9873320eac2fcbf1, e8238f9a8339b3578c85e4192a7a23bc2bdc0333 to before 3c46d6060d3e38de22196c1fe7706c5a3c696285, e8238f9a8339b3578c85e4192a7a23bc2bdc0333 to before 53b1999cfd2c7addf2e581a32865fe8835467b44, e8238f9a8339b3578c85e4192a7a23bc2bdc0333 to before ef05572da0c0eb89614ed01cc17d3c882bdbd1ff, e8238f9a8339b3578c85e4192a7a23bc2bdc0333 to before 9fedf51ab8cf7b69bff08f37fe0989fec7f5d870, e8238f9a8339b3578c85e4192a7a23bc2bdc0333 to before d43776b907659affef1de888525847d64b244194, e8238f9a8339b3578c85e4192a7a23bc2bdc0333 to before 6252cb6bde7fc76cb8dcb49d1def7c326b190820, e8238f9a8339b3578c85e4192a7a23bc2bdc0333 to before d58a00e981d3118b91d503da263e640b7cde6729, e8238f9a8339b3578c85e4192a7a23bc2bdc0333 to before cc749e61c011c255d81b192a822db650c68b313f
Linux

Linux · 3.10
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
Function: calling, while, might
File: fs/ext4/migrate.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50067

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50095

Affected technology

linux kernel · before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.57 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.4 (exclusive)
linux

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 713adaf0ecfc49405f6e5d9e409d984f628de818, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7022a517bf1ca37ef5a474365bcc5eafd345a13a, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before e80eadb3604a92d2d086e956b8b2692b699d4d0a, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a195a42dd25ca4f12489687065d00be64939409f, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 3e799fa463508abe7a738ce5d0f62a8dfd05262a, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2a777679b8ccd09a9a65ea0716ef10365179caac
Linux

Linux · 2.6.12
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: drivers/infiniband/core/mad.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50179

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50299

Affected technology

linux kernel · from 2.6.12 (inclusive), before 4.19.324 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.286 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.230 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.172 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.117 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.61 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.8 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

linux kernel · 6.12 · update rc3
linux

linux kernel · 6.12 · update rc4
linux

linux kernel · 6.12 · update rc5
linux

linux kernel · 6.12 · update rc6
linux

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 67b9a278b80f71ec62091ded97c6bcbea33b5ec3, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 9b5d42aeaf1a52f73b003a33da6deef7df34685f, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 40b283ba76665437bc2ac72079c51b57b25bff9e, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a758aa6a773bb872196bcc3173171ef8996bddf0, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before bf9bff13225baf5f658577f7d985fc4933d79527, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d3fb3cc83cf313e4f87063ce0f3fea76b071567b, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8820d2d6589f62ee5514793fff9b50c9f8101182, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 0ead60804b64f5bd6999eec88e503c6a1a242d41
Linux

Linux · 2.6.12
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: net/sctp/sm_statefuns.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.2/10) rates confidentiality impact as low; integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-53090

Affected technology

linux kernel · before 6.11.9 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

linux kernel · 6.12 · update rc3
linux

linux kernel · 6.12 · update rc4
linux

Linux · 20acbd9a7aeee0b0af7107f3de791a52c949f3ac to before 9ada9ff6339d49df2260bb876ccf895d88928f81, 20acbd9a7aeee0b0af7107f3de791a52c949f3ac to before d7cbf81df996b1eae2dee8deb6df08e2eba78661, 20acbd9a7aeee0b0af7107f3de791a52c949f3ac to before 610a79ffea02102899a1373fe226d949944a7ed6
Linux

Linux · 4.15
Linux

Component: Not specified by the source
File: fs/afs/internal.h, fs/afs/rxrpc.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-53112

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-53124

Affected technology

linux kernel · from 4.4 (inclusive), before 6.11.10 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

linux kernel · 6.12 · update rc3
linux

linux kernel · 6.12 · update rc4
linux

linux kernel · 6.12 · update rc5
linux

linux kernel · 6.12 · update rc6
linux

linux kernel · 6.12 · update rc7
linux

Linux · e994b2f0fb9229aeff5eea9541320bd7b2ca8714 to before 695fb0b9aecfd5dd5b2946ba8897ac2c1eef654d, e994b2f0fb9229aeff5eea9541320bd7b2ca8714 to before fe2c0bd6d1e29ccefdc978b9a290571c93c27473, e994b2f0fb9229aeff5eea9541320bd7b2ca8714 to before c3d052cae566ec2285f5999958a5deb415a0f59e, e994b2f0fb9229aeff5eea9541320bd7b2ca8714 to before be7c61ea5f816168c38955eb4e898adc8b4b32fd, e994b2f0fb9229aeff5eea9541320bd7b2ca8714 to before 3f51f8c9d28954cf380100883a02eed35a8277e9, e994b2f0fb9229aeff5eea9541320bd7b2ca8714 to before d285eb9d0641c8344f2836081b4ccb7b3c5cc1b6, e994b2f0fb9229aeff5eea9541320bd7b2ca8714 to before 073d89808c065ac4c672c0a613a71b27a80691cb
Linux

Linux · 4.4
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 TM MFP - BIOS · 0 to before *
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/dccp/ipv6.c, net/ipv6/tcp_ipv6.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-53150

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-53217

Affected technology

linux kernel · from 2.6.38 (inclusive), before 4.19.325 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.287 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.231 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.174 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.120 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.64 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.11 (exclusive)
linux

linux kernel · from 6.12 (inclusive), before 6.12.2 (exclusive)
linux

Linux · dcbeaa68dbbdacbbb330a86c7fc95a28473fc209 to before d9a0d1f6e15859ea7a86a327f28491e23deaaa62, dcbeaa68dbbdacbbb330a86c7fc95a28473fc209 to before cac1405e3ff6685a438e910ad719e0cf06af90ee, dcbeaa68dbbdacbbb330a86c7fc95a28473fc209 to before 752a75811f27300fe8131b0a1efc91960f6f88e7, dcbeaa68dbbdacbbb330a86c7fc95a28473fc209 to before c5d90f9302742985a5078e42ac38de42c364c44a, dcbeaa68dbbdacbbb330a86c7fc95a28473fc209 to before 0c3b0e326f838787d229314d4de83af9c53347e8, dcbeaa68dbbdacbbb330a86c7fc95a28473fc209 to before eb51733ae5fc73d95bd857d5da26f9f65b202a79, dcbeaa68dbbdacbbb330a86c7fc95a28473fc209 to before 03178cd8f67227015debb700123987fe96275cd1, dcbeaa68dbbdacbbb330a86c7fc95a28473fc209 to before 4a4ffc1aa9d618e41ad9151f40966e402e58a5a2, dcbeaa68dbbdacbbb330a86c7fc95a28473fc209 to before 1e02c641c3a43c88cecc08402000418e15578d38
Linux

Linux · 2.6.38
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

Component: Not specified by the source
File: fs/nfsd/nfs4callback.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-56767

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-58083

Affected technology

linux kernel · from 4.14.120 (inclusive), before 4.15 (exclusive)
linux

linux kernel · from 4.19.44 (inclusive), before 4.20 (exclusive)
linux

linux kernel · from 5.0.17 (inclusive), before 5.4.291 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.235 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.179 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.129 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.78 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.14 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.13.3 (exclusive)
linux

Linux · 1d487e9bf8ba66a7174c56a0029c54b1eca8f99c to before 5cce2ed69b00e022b5cdf0c49c82986abd2941a8, 1d487e9bf8ba66a7174c56a0029c54b1eca8f99c to before 09d50ccf0b2d739db4a485b08afe7520a4402a63, 1d487e9bf8ba66a7174c56a0029c54b1eca8f99c to before 7c4899239d0f70f88ac42665b3da51678d122480, 1d487e9bf8ba66a7174c56a0029c54b1eca8f99c to before d817e510662fd1c9797952408d94806f97a5fffd, 1d487e9bf8ba66a7174c56a0029c54b1eca8f99c to before 125da53b3c0c9d7f58353aea0076e9efd6498ba7, 1d487e9bf8ba66a7174c56a0029c54b1eca8f99c to before f2f805ada63b536bc192458a7098388286568ad4, 1d487e9bf8ba66a7174c56a0029c54b1eca8f99c to before ca8da90ed1432ff3d000de4f1e2275d4e7d21b96, 1d487e9bf8ba66a7174c56a0029c54b1eca8f99c to before 1e7381f3617d14b3c11da80ff5f8a93ab14cfc46, 559e2696d2f47a3575e9550f101a7e59e30b1b38, d39f3cc71382165bb7efb8e06a2bd32f847de4ae, 7cee966029037a183d98cb88251ceb92a233fe63, 4.14.120 to before 4.15, 4.19.44 to before 4.20, 5.0.17 to before 5.1
Linux

Linux · 5.1
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
File: include/linux/kvm_host.h

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-21715

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-21722

Affected technology

linux kernel · from 3.10 (inclusive), before 5.4.291 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.235 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.179 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.129 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.12.13 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.13.2 (exclusive)
linux

Linux · 8c26c4e2694a163d525976e804d81cd955bbb40c to before 7d0544bacc11d6aa26ecd7debf9353193c7a3328, 8c26c4e2694a163d525976e804d81cd955bbb40c to before 4d042811c72f71be7c14726db2c72b67025a7cb5, 8c26c4e2694a163d525976e804d81cd955bbb40c to before f51ff43c4c5a6c8e72d0aca89e4d5e688938412f, 8c26c4e2694a163d525976e804d81cd955bbb40c to before 19296737024cd220a1d6590bf4c092bca8c99497, 8c26c4e2694a163d525976e804d81cd955bbb40c to before 8458c686d50a804611b97038dd6e75a474ac2221, 8c26c4e2694a163d525976e804d81cd955bbb40c to before 1098bb8d52419d262a3358d099a1598a920b730f, 8c26c4e2694a163d525976e804d81cd955bbb40c to before 557ccf5e49f1fb848a29698585bcab2e50a597ef, 8c26c4e2694a163d525976e804d81cd955bbb40c to before ca76bb226bf47ff04c782cacbd299f12ddee1ec1
Linux

Linux · 3.10
Linux

Component: Not specified by the source
File: fs/nilfs2/page.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-21761

Affected technology

linux kernel · from 4.15 (inclusive), before 5.4.291 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.235 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.179 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.129 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.79 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.16 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.13.4 (exclusive)
linux

linux kernel · 6.14 · update rc1
linux

linux kernel · 6.14 · update rc2
linux

Linux · 9354d452034273a50a4fd703bea31e5d6b1fc20b to before e85a25d1a9985645e796039e843d1de581d2de1e, 9354d452034273a50a4fd703bea31e5d6b1fc20b to before a8816b3f1f151373fd30f1996f00480126c8bb11, 9354d452034273a50a4fd703bea31e5d6b1fc20b to before a884f57600e463f69d7b279c4598b865260b62a1, 9354d452034273a50a4fd703bea31e5d6b1fc20b to before 7e01abc34e87abd091e619161a20f54ed4e3e2da, 9354d452034273a50a4fd703bea31e5d6b1fc20b to before 8ec57509c36c8b9a23e50b7858dda0c520a2d074, 9354d452034273a50a4fd703bea31e5d6b1fc20b to before a849a10de5e04d798f7f286a2f1ca174719a617a, 9354d452034273a50a4fd703bea31e5d6b1fc20b to before 5828937742af74666192835d657095d95c53dbd0, 9354d452034273a50a4fd703bea31e5d6b1fc20b to before 90b2f49a502fa71090d9f4fe29a2f51fe5dff76d
Linux

Linux · 4.15
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
File: net/openvswitch/datapath.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-21791

Affected technology

linux kernel · from 4.9 (inclusive), before 6.1.129 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.79 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.16 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.13.4 (exclusive)
linux

linux kernel · 6.14 · update rc1
linux

linux kernel · 6.14 · update rc2
linux

Linux · a8e3e1a9f02094145580ea7920c6a1d9aabd5539 to before 6ccaa5797f5362a2aad6baa6ddaf4715ac2dd51e, a8e3e1a9f02094145580ea7920c6a1d9aabd5539 to before 20a3489b396764cc9376e32a9172bee26a89dc3b, a8e3e1a9f02094145580ea7920c6a1d9aabd5539 to before 5bb4228c32261d06e4fbece37ec3828bcc005b6b, a8e3e1a9f02094145580ea7920c6a1d9aabd5539 to before c7574740be8ce68a57d0aece24987b9be2114c3c, a8e3e1a9f02094145580ea7920c6a1d9aabd5539 to before c40cb5c03e37552d6eff963187109e2c3f78ef6f, a8e3e1a9f02094145580ea7920c6a1d9aabd5539 to before 022cac1c693add610ae76ede03adf4d9d5a2cf21, a8e3e1a9f02094145580ea7920c6a1d9aabd5539 to before 7b81425b517accefd46bee854d94954f5c57e019, a8e3e1a9f02094145580ea7920c6a1d9aabd5539 to before 6d0ce46a93135d96b7fa075a94a88fe0da8e8773
Linux

Linux · 4.9
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
File: include/net/l3mdev.h

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-21811

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-21855

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-37838

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-37958

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38352

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38666

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-39964

Affected technology

linux kernel · from 2.6.38 (inclusive), before 5.10.245 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.194 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.154 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.108 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.49 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.9 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

linux kernel · 6.17 · update rc4
linux

linux kernel · 6.17 · update rc5
linux

linux kernel · 6.17 · update rc6
linux

simatic s7-1500 cpu 1518-4 pn/dp mfp firmware · from 3.1.6 (inclusive)
siemens

simatic s7-1500 cpu 1518f-4 pn/dp mfp firmware · from 3.1.6 (inclusive)
siemens

Linux · 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 to before 0f28c4adbc4a97437874c9b669fd7958a8c6d6ce, 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 to before e4c1ec11132ec466f7362a95f36a506ce4dc08c9, 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 to before 1f323a48e9b5ebfe6dc7d130fdf5c3c0e92a07c8, 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 to before 7c4491b5644e3a3708f3dbd7591be0a570135b84, 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 to before 9aee87da5572b3a14075f501752e209801160d3d, 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 to before 45bcf60fe49b37daab1acee57b27211ad1574042, 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 to before 1b34cbbf4f011a121ef7b2d7d6e6920a036d5285
Linux

Linux · 2.6.38
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: crypto/af_alg.c, include/crypto/if_alg.h

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-40018

Affected technology

Linux · 61b1ab4583e275af216c8454b9256de680499b19 to before 8a6ecab3847c213ce2855b0378e63ce839085de3, 61b1ab4583e275af216c8454b9256de680499b19 to before 421b1ae1574dfdda68b835c15ac4921ec0030182, 61b1ab4583e275af216c8454b9256de680499b19 to before 1d79471414d7b9424d699afff2aa79fff322f52d, 61b1ab4583e275af216c8454b9256de680499b19 to before 53717f8a4347b78eac6488072ad8e5adbaff38d9, 61b1ab4583e275af216c8454b9256de680499b19 to before 8cbe2a21d85727b66d7c591fd5d83df0d8c4f757, 61b1ab4583e275af216c8454b9256de680499b19 to before dc1a481359a72ee7e548f1f5da671282a7c13b8f, 61b1ab4583e275af216c8454b9256de680499b19 to before a343811ef138a265407167294275201621e9ebb2, 61b1ab4583e275af216c8454b9256de680499b19 to before 134121bfd99a06d44ef5ba15a9beb075297c0821
Linux

Linux · 2.6.39
Linux

Component: Not specified by the source
File: net/netfilter/ipvs/ip_vs_ftp.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-40300

Affected technology

linux kernel · from 3.16.57 (inclusive), before 3.17 (exclusive)
linux

linux kernel · from 4.4.168 (inclusive), before 4.5 (exclusive)
linux

linux kernel · from 4.16 (inclusive), before 5.10.244 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.193 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.152 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.106 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.47 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.7 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

linux kernel · 6.17 · update rc4
linux

linux kernel · 6.17 · update rc5
linux

debian linux · 11.0
debian

Linux · 15d45071523d89b3fb7372e2135fbd72f6af9506 to before ac60717f9a8d21c58617d0b34274babf24135835, 15d45071523d89b3fb7372e2135fbd72f6af9506 to before c08192b5d6730a914dee6175bc71092ee6a65f14, 15d45071523d89b3fb7372e2135fbd72f6af9506 to before d5490dfa35427a2967e00a4c7a1b95fdbc8ede34, 15d45071523d89b3fb7372e2135fbd72f6af9506 to before 2f4f2f8f860cb4c3336a7435ebe8dcfded0c9c6e, 15d45071523d89b3fb7372e2135fbd72f6af9506 to before 15006289e5c38b2a830e1fba221977a27598176c, 15d45071523d89b3fb7372e2135fbd72f6af9506 to before 893387c18612bb452336a5881da0d015a7e8f4a2, 15d45071523d89b3fb7372e2135fbd72f6af9506 to before f866eef8d1c65504d30923c3f14082ad294d0e6d, 15d45071523d89b3fb7372e2135fbd72f6af9506 to before 34e5667041050711a947e260fc9ebebe08bddee5, 15d45071523d89b3fb7372e2135fbd72f6af9506 to before d7ddc93392e4a7ffcccc86edf6ef3e64c778db52, 15d45071523d89b3fb7372e2135fbd72f6af9506 to before 459274c77b37ac63b78c928b4b4e748d1f9d05c8, 15d45071523d89b3fb7372e2135fbd72f6af9506 to before 510603f504796c3535f67f55fb0b124a303b44c8, 15d45071523d89b3fb7372e2135fbd72f6af9506 to before 9c23a90648e831d611152ac08dbcd1283d405e7f, 15d45071523d89b3fb7372e2135fbd72f6af9506 to before 2f8f173413f1cbf52660d04df92d0069c4306d25, c51f1e5f57cca88d8d5894b6fad1638f643a99d0, 4b3870c343a82cd2df7192cc5149c87205dcc611, 3.16.57 to before 3.17, 4.4.168 to before 4.5
Linux

Linux · 4.16
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: arch/x86/include/asm/cpufeatures.h, arch/x86/include/asm/entry-common.h, arch/x86/include/asm/nospec-branch.h, arch/x86/kernel/cpu/bugs.c, arch/x86/kvm/x86.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.