CVE-2022-49026, CVE-2022-49390, CVE-2023-52854 +20 more CVEs: linux kernel before 5.10.227 (exclusive), from 5.11 (inclusive), before 5.15.168 (exclusive)…

CVE-2022-49026

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2022-49390

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2023-52854

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-35867

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47691

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49935

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50061

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50067

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50095

Affected technology

linux kernel · before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.57 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.4 (exclusive)
linux

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 713adaf0ecfc49405f6e5d9e409d984f628de818, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7022a517bf1ca37ef5a474365bcc5eafd345a13a, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before e80eadb3604a92d2d086e956b8b2692b699d4d0a, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a195a42dd25ca4f12489687065d00be64939409f, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 3e799fa463508abe7a738ce5d0f62a8dfd05262a, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2a777679b8ccd09a9a65ea0716ef10365179caac
Linux

Linux · 2.6.12
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: drivers/infiniband/core/mad.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50196

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-53090

Affected technology

linux kernel · before 6.11.9 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

linux kernel · 6.12 · update rc3
linux

linux kernel · 6.12 · update rc4
linux

Linux · 20acbd9a7aeee0b0af7107f3de791a52c949f3ac to before 9ada9ff6339d49df2260bb876ccf895d88928f81, 20acbd9a7aeee0b0af7107f3de791a52c949f3ac to before d7cbf81df996b1eae2dee8deb6df08e2eba78661, 20acbd9a7aeee0b0af7107f3de791a52c949f3ac to before 610a79ffea02102899a1373fe226d949944a7ed6
Linux

Linux · 4.15
Linux

Component: Not specified by the source
File: fs/afs/internal.h, fs/afs/rxrpc.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-53218

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-56664

Affected technology

linux kernel · from 4.20 (inclusive), before 6.6.67 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.6 (exclusive)
linux

linux kernel · 6.13 · update rc1
linux

linux kernel · 6.13 · update rc2
linux

Linux · 604326b41a6fb9b4a78b6179335decee0365cd8c to before 6deb9e85dc9a2ba4414b91c1b5b00b8415910890, 604326b41a6fb9b4a78b6179335decee0365cd8c to before fdb2cd8957ac51f84c9e742ba866087944bb834b, 604326b41a6fb9b4a78b6179335decee0365cd8c to before b79a0d1e9a374d1b376933a354c4fcd01fce0365, 604326b41a6fb9b4a78b6179335decee0365cd8c to before b015f19fedd2e12283a8450dd0aefce49ec57015, 604326b41a6fb9b4a78b6179335decee0365cd8c to before bf2318e288f636a882eea39f7e1015623629f168, 604326b41a6fb9b4a78b6179335decee0365cd8c to before ed1fc5d76b81a4d681211333c026202cad4d5649
Linux

Linux · 4.20
Linux

Component: Not specified by the source
File: net/core/sock_map.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-21727

Affected technology

linux kernel · from 5.4 (inclusive), before 5.10.235 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.179 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.129 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.76 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.13 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.13.2 (exclusive)
linux

Linux · b128a30409356df65f1a51cff3eb986cac8cfedc to before f78170bee51469734b1a306a74fc5f777bb22ba6, b128a30409356df65f1a51cff3eb986cac8cfedc to before f3e0b9f790f8e8065d59e67b565a83154d9f3079, b128a30409356df65f1a51cff3eb986cac8cfedc to before 0ae2f332cfd2d74cf3ce344ec9938cf3e29c3ccd, b128a30409356df65f1a51cff3eb986cac8cfedc to before bbccae982e9fa1d7abcb23a5ec81cb0ec883f7de, b128a30409356df65f1a51cff3eb986cac8cfedc to before 573ac9c70bf7885dc85d82fa44550581bfc3b738, b128a30409356df65f1a51cff3eb986cac8cfedc to before 80231f069240d52e98b6a317456c67b2eafd0781, b128a30409356df65f1a51cff3eb986cac8cfedc to before e01780ea4661172734118d2a5f41bc9720765668
Linux

Linux · 5.4
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
File: kernel/padata.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-21855

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-37838

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-37958

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38352

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38666

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-39964

Affected technology

linux kernel · from 2.6.38 (inclusive), before 5.10.245 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.194 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.154 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.108 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.49 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.9 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

linux kernel · 6.17 · update rc4
linux

linux kernel · 6.17 · update rc5
linux

linux kernel · 6.17 · update rc6
linux

simatic s7-1500 cpu 1518-4 pn/dp mfp firmware · from 3.1.6 (inclusive)
siemens

simatic s7-1500 cpu 1518f-4 pn/dp mfp firmware · from 3.1.6 (inclusive)
siemens

Linux · 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 to before 0f28c4adbc4a97437874c9b669fd7958a8c6d6ce, 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 to before e4c1ec11132ec466f7362a95f36a506ce4dc08c9, 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 to before 1f323a48e9b5ebfe6dc7d130fdf5c3c0e92a07c8, 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 to before 7c4491b5644e3a3708f3dbd7591be0a570135b84, 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 to before 9aee87da5572b3a14075f501752e209801160d3d, 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 to before 45bcf60fe49b37daab1acee57b27211ad1574042, 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 to before 1b34cbbf4f011a121ef7b2d7d6e6920a036d5285
Linux

Linux · 2.6.38
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: crypto/af_alg.c, include/crypto/if_alg.h

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-39993

Affected technology

Linux · 21677cfc562a27e099719d413287bc8d1d24deb7 to before 9348976003e39754af344949579e824a0a210fc4, 21677cfc562a27e099719d413287bc8d1d24deb7 to before b03fac6e2a38331faf8510b480becfa90cea1c9f, 21677cfc562a27e099719d413287bc8d1d24deb7 to before 71c52b073922d05e79e6de7fc7f5f38f927929a4, 21677cfc562a27e099719d413287bc8d1d24deb7 to before 71096a6161a25e84acddb89a9d77f138502d26ab, 21677cfc562a27e099719d413287bc8d1d24deb7 to before 71da40648741d15b302700b68973fe8b382aef3c, 21677cfc562a27e099719d413287bc8d1d24deb7 to before fd5d3e6b149ec8cce045d86a2b5e3664d6b32ba5, 21677cfc562a27e099719d413287bc8d1d24deb7 to before d9f6ce99624a41c3bcb29a8d7d79b800665229dd, 21677cfc562a27e099719d413287bc8d1d24deb7 to before 2e7fd93b9cc565b839bc55a6662475718963e156, 21677cfc562a27e099719d413287bc8d1d24deb7 to before fa0f61cc1d828178aa921475a9b786e7fbb65ccb
Linux

Linux · 2.6.35
Linux

Component: Not specified by the source
File: drivers/media/rc/imon.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

A local attacker with low privileges can trigger a use-after-free error. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not state a further attacker outcome.

CVE-2025-40018

Affected technology

Linux · 61b1ab4583e275af216c8454b9256de680499b19 to before 8a6ecab3847c213ce2855b0378e63ce839085de3, 61b1ab4583e275af216c8454b9256de680499b19 to before 421b1ae1574dfdda68b835c15ac4921ec0030182, 61b1ab4583e275af216c8454b9256de680499b19 to before 1d79471414d7b9424d699afff2aa79fff322f52d, 61b1ab4583e275af216c8454b9256de680499b19 to before 53717f8a4347b78eac6488072ad8e5adbaff38d9, 61b1ab4583e275af216c8454b9256de680499b19 to before 8cbe2a21d85727b66d7c591fd5d83df0d8c4f757, 61b1ab4583e275af216c8454b9256de680499b19 to before dc1a481359a72ee7e548f1f5da671282a7c13b8f, 61b1ab4583e275af216c8454b9256de680499b19 to before a343811ef138a265407167294275201621e9ebb2, 61b1ab4583e275af216c8454b9256de680499b19 to before 134121bfd99a06d44ef5ba15a9beb075297c0821
Linux

Linux · 2.6.39
Linux

Component: Not specified by the source
File: net/netfilter/ipvs/ip_vs_ftp.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-40300

Affected technology

linux kernel · from 3.16.57 (inclusive), before 3.17 (exclusive)
linux

linux kernel · from 4.4.168 (inclusive), before 4.5 (exclusive)
linux

linux kernel · from 4.16 (inclusive), before 5.10.244 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.193 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.152 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.106 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.47 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.7 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

linux kernel · 6.17 · update rc4
linux

linux kernel · 6.17 · update rc5
linux

debian linux · 11.0
debian

Linux · 15d45071523d89b3fb7372e2135fbd72f6af9506 to before ac60717f9a8d21c58617d0b34274babf24135835, 15d45071523d89b3fb7372e2135fbd72f6af9506 to before c08192b5d6730a914dee6175bc71092ee6a65f14, 15d45071523d89b3fb7372e2135fbd72f6af9506 to before d5490dfa35427a2967e00a4c7a1b95fdbc8ede34, 15d45071523d89b3fb7372e2135fbd72f6af9506 to before 2f4f2f8f860cb4c3336a7435ebe8dcfded0c9c6e, 15d45071523d89b3fb7372e2135fbd72f6af9506 to before 15006289e5c38b2a830e1fba221977a27598176c, 15d45071523d89b3fb7372e2135fbd72f6af9506 to before 893387c18612bb452336a5881da0d015a7e8f4a2, 15d45071523d89b3fb7372e2135fbd72f6af9506 to before f866eef8d1c65504d30923c3f14082ad294d0e6d, 15d45071523d89b3fb7372e2135fbd72f6af9506 to before 34e5667041050711a947e260fc9ebebe08bddee5, 15d45071523d89b3fb7372e2135fbd72f6af9506 to before d7ddc93392e4a7ffcccc86edf6ef3e64c778db52, 15d45071523d89b3fb7372e2135fbd72f6af9506 to before 459274c77b37ac63b78c928b4b4e748d1f9d05c8, 15d45071523d89b3fb7372e2135fbd72f6af9506 to before 510603f504796c3535f67f55fb0b124a303b44c8, 15d45071523d89b3fb7372e2135fbd72f6af9506 to before 9c23a90648e831d611152ac08dbcd1283d405e7f, 15d45071523d89b3fb7372e2135fbd72f6af9506 to before 2f8f173413f1cbf52660d04df92d0069c4306d25, c51f1e5f57cca88d8d5894b6fad1638f643a99d0, 4b3870c343a82cd2df7192cc5149c87205dcc611, 3.16.57 to before 3.17, 4.4.168 to before 4.5
Linux

Linux · 4.16
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: arch/x86/include/asm/cpufeatures.h, arch/x86/include/asm/entry-common.h, arch/x86/include/asm/nospec-branch.h, arch/x86/kernel/cpu/bugs.c, arch/x86/kvm/x86.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.