Get real-time updates on Telegram
CVE-2022-49465, CVE-2022-49635, CVE-2023-53421 +423 more CVEs: linux kernel 5.15, 5.9, 4.7 (+34 more affected versions); +26 more affected products
CVE-2022-49465, CVE-2022-49635, CVE-2023-53421, CVE-2023-53520, CVE-2023-53662, CVE-2023-54207, CVE-2024-36903, CVE-2024-36927, CVE-2024-37354, CVE-2024-41014, CVE-2024-46830, CVE-2024-47666, CVE-2024-49968, CVE-2024-53114, CVE-2024-56538, CVE-2024-58011, CVE-2025-21780, CVE-2025-21861, CVE-2025-22022, CVE-2025-22058, CVE-2025-22111, CVE-2025-22121, CVE-2025-23143, CVE-2025-37849, CVE-2025-38022, CVE-2025-38057, CVE-2025-38125, CVE-2025-38129, CVE-2025-38232, CVE-2025-38236, CVE-2025-38248, CVE-2025-38408, CVE-2025-38556, CVE-2025-38584, CVE-2025-38591, CVE-2025-39869, CVE-2025-39873, CVE-2025
CVE-2022-49465
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
Attack conditions (OSV, CVSS 3.1): Local · High privileges required · No user interaction required
What an attacker can do
OSV’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2022-49635
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2023-53421
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2023-53520
Affected technology
linux kernel · from 5.7 (inclusive), before 6.1.55 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.5.5 (exclusive)
linux
Linux · 9952d90ea2885d7cbf80cd233f694f09a9c0eaec to before e1fa25a91091bbed691ba2996a6cee809e3309a2, 9952d90ea2885d7cbf80cd233f694f09a9c0eaec to before 06e2b5ad72b60f90bfe565c201346532e271f484, 9952d90ea2885d7cbf80cd233f694f09a9c0eaec to before f9c8ce5d665653e3cf71a76349d41d7a7f7947e6, 9952d90ea2885d7cbf80cd233f694f09a9c0eaec to before 573ebae162111063eedc6c838a659ba628f66a0f
Linux
Linux · 5.7
Linux
Component: Not specified by the source
File: net/bluetooth/hci_core.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2023-53662
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2023-54207
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2024-36903
Affected technology
linux kernel · from 4.14.313 (inclusive), before 4.15 (exclusive)
linux
linux kernel · from 4.19.281 (inclusive), before 4.20 (exclusive)
linux
linux kernel · from 5.4.241 (inclusive), before 5.5 (exclusive)
linux
linux kernel · from 5.10.178 (inclusive), before 5.11 (exclusive)
linux
linux kernel · from 5.15.107 (inclusive), before 5.16 (exclusive)
linux
linux kernel · from 6.1.24 (inclusive), before 6.2 (exclusive)
linux
linux kernel · from 6.2.11 (inclusive), before 6.6.31 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.8.10 (exclusive)
linux
linux kernel · 6.9 · update rc1
linux
linux kernel · 6.9 · update rc2
linux
linux kernel · 6.9 · update rc3
linux
linux kernel · 6.9 · update rc4
linux
linux kernel · 6.9 · update rc5
linux
linux kernel · 6.9 · update rc6
linux
linux kernel · 6.9 · update rc7
linux
Linux · 605b056d63302ae84eb136e88d4df49124bd5e0d to before 59d74c843ebf46264c7903726cf6f2673a93b07a, d65ff2fe877c471aa6e79efa7bd8ff66e147c317 to before 40e5444a3ac315b60e94d82226b73cd82145d09e, 2c9cefc142c1dc2759e19a92d3b2b3715e985beb to before a05c1ede50e9656f0752e523c7b54f3a3489e9a8, ea30388baebcce37fd594d425a65037ca35e59e8 to before 68c8ba16ab712eb709c6bab80ff151079d11d97a, ea30388baebcce37fd594d425a65037ca35e59e8 to before 2367bf254f3a27ecc6e229afd7a8b0a1395f7be3, ea30388baebcce37fd594d425a65037ca35e59e8 to before 4e13d3a9c25b7080f8a619f961e943fe08c2672c, 165370522cc48127da564a08584a7391e6341908, f394f690a30a5ec0413c62777a058eaf3d6e10d5, 0cf600ca1bdf1d52df977516ee6cee0cadb1f6b1, 02ed5700f40445af02d1c97db25ffc2d04971d9f, 5.10.178 to before 5.10.248, 5.15.107 to before 5.15.198, 6.1.24 to before 6.1.140, 4.14.313 to before 4.15, 4.19.281 to before 4.20, 5.4.241 to before 5.5, 6.2.11 to before 6.3
Linux
Linux · 6.3
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: net/ipv6/ip6_output.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2024-36927
Affected technology
linux kernel · from 4.14.315 (inclusive), before 4.15 (exclusive)
linux
linux kernel · from 4.19.283 (inclusive), before 4.20 (exclusive)
linux
linux kernel · from 5.4.243 (inclusive), before 5.5 (exclusive)
linux
linux kernel · from 5.10.180 (inclusive), before 5.11 (exclusive)
linux
linux kernel · from 5.15.111 (inclusive), before 5.16 (exclusive)
linux
linux kernel · from 6.1.28 (inclusive), before 6.2 (exclusive)
linux
linux kernel · from 6.2.15 (inclusive), before 6.3 (exclusive)
linux
linux kernel · from 6.3.2 (inclusive), before 6.6.31 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.8.10 (exclusive)
linux
linux kernel · 6.9 · update rc1
linux
linux kernel · 6.9 · update rc2
linux
linux kernel · 6.9 · update rc3
linux
linux kernel · 6.9 · update rc4
linux
linux kernel · 6.9 · update rc5
linux
linux kernel · 6.9 · update rc6
linux
Linux · 566785731c6dd41ef815196ddc36d1ae30a63763 to before 88c66f1879f322f11de34d37b2d3d87497afdcb6, a54ec573d9b81b05d368f8e6edc1b3e49f688658 to before 20d3eb00ab81462d554ac6d09691b8d9aa5a5741, fc60067260c20da8cddcf968bec47416f3e2cde2 to before 55bf541e018b76b3750cb6c6ea18c46e1ac5562e, 99e5acae193e369b71217efe6f1dad42f3f18815 to before 5db08343ddb1b239320612036c398e4e1bb52818, 99e5acae193e369b71217efe6f1dad42f3f18815 to before f5c603ad4e6fcf42f84053e882ebe20184bb309e, 99e5acae193e369b71217efe6f1dad42f3f18815 to before fc1092f51567277509563800a3c56732070b6aa4, dc4e3bb0710178c8d03fc43064e0a71fe7440cdd, 022ea4374c319690c804706bda9dc42946d1556d, 27c468ec1af113f6ae94fb5378f65e6038bd16e7, 32a5a13d556e4f804e5a447a08c70b172d600707, 9e3c96aed8fe32907e0a4bca05aad457629a820c, 5.10.180 to before 5.10.248, 5.15.111 to before 5.15.198, 6.1.28 to before 6.1.140, 4.14.315 to before 4.15, 4.19.283 to before 4.20, 5.4.243 to before 5.5, 6.2.15 to before 6.3, 6.3.2 to before 6.4
Linux
Linux · 6.4
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: net/ipv4/ip_output.c, net/ipv4/raw.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2024-37354
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2024-41014
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2024-46830
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2024-47666
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2024-49968
Affected technology
linux kernel · before 6.11.3 (exclusive)
linux
Linux · 471fbbea7ff7061b2d6474665cb5a2ceb4fd6500 to before 86b81d4eab1cd4c56f7447896232cf33472c2395, 471fbbea7ff7061b2d6474665cb5a2ceb4fd6500 to before 11bd1c279bac701ba91119875796ffff3b98250e, 471fbbea7ff7061b2d6474665cb5a2ceb4fd6500 to before 52c4538a92da6f3242d4140c03ddc5ee71b39ba8, 471fbbea7ff7061b2d6474665cb5a2ceb4fd6500 to before e1373903db6c4ac994de0d18076280ad88e12dee, 471fbbea7ff7061b2d6474665cb5a2ceb4fd6500 to before 985b67cd86392310d9e9326de941c22fc9340eec
Linux
Linux · 5.13
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: fs/ext4/super.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2024-53114
Affected technology
linux kernel · before 6.11.10 (exclusive)
linux
linux kernel · 6.12 · update rc1
linux
linux kernel · 6.12 · update rc2
linux
linux kernel · 6.12 · update rc3
linux
linux kernel · 6.12 · update rc4
linux
linux kernel · 6.12 · update rc5
linux
linux kernel · 6.12 · update rc6
linux
linux kernel · 6.12 · update rc7
linux
Linux · 89c8a4984fc98e625517bfe5083342d77ee35811 to before cf79df17706605032461f1ebde730b4391d1ca9c, 89c8a4984fc98e625517bfe5083342d77ee35811 to before 00c713f84f477a85e524f34aad8fbd11a1c051f0, 89c8a4984fc98e625517bfe5083342d77ee35811 to before a5ca1dc46a6b610dd4627d8b633d6c84f9724ef0
Linux
Linux · 4.13
Linux
Component: Not specified by the source
File: arch/x86/kernel/cpu/amd.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2024-56538
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2024-58011
Affected technology
linux kernel · before 6.1.129 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.78 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.14 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.13.3 (exclusive)
linux
Linux · 5de691bffe57fd0fc2b4dcdcf13815c56d11db10 to before 46263a0b687a044e645387a9c7692ccd693f09f1, 5de691bffe57fd0fc2b4dcdcf13815c56d11db10 to before 4f8b210823cc2d1f9d967f089a6c00d025bb237f, 5de691bffe57fd0fc2b4dcdcf13815c56d11db10 to before f9c7cc44758f4930b41285a6d54afa8cbd9762b4, 5de691bffe57fd0fc2b4dcdcf13815c56d11db10 to before 0a30353beca2693d30bde477024d755ffecea514, 5de691bffe57fd0fc2b4dcdcf13815c56d11db10 to before a808ecf878ad646ebc9c83d9fc4ce72fd9c49d3d, 5de691bffe57fd0fc2b4dcdcf13815c56d11db10 to before cd2fd6eab480dfc247b737cf7a3d6b009c4d0f1c
Linux
Linux · 5.14
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: drivers/platform/x86/intel/int3472/discrete.c, drivers/platform/x86/intel/int3472/tps68470.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-21780
Affected technology
linux kernel · before 6.1.129 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.79 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.16 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.13.4 (exclusive)
linux
linux kernel · 6.14 · update rc1
linux
linux kernel · 6.14 · update rc2
linux
Linux · 137d63abbf6a0859e79b662e81d21170ecb75e59 to before 3484ea33157bc7334f57e64826ec5a4bf992151a, 137d63abbf6a0859e79b662e81d21170ecb75e59 to before e43a8b9c4d700ffec819c5043a48769b3e7d9cab, 137d63abbf6a0859e79b662e81d21170ecb75e59 to before 2498d2db1d35e88a2060ea191ae75dce853dd084, 137d63abbf6a0859e79b662e81d21170ecb75e59 to before 231075c5a8ea54f34b7c4794687baa980814e6de, 137d63abbf6a0859e79b662e81d21170ecb75e59 to before 1abb2648698bf10783d2236a6b4a7ca5e8021699
Linux
Linux · 5.2
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
Function: smu_sys_set_pp_table
File: drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-21861
Affected technology
linux kernel · from 4.14 (inclusive), before 6.12.17 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.13.5 (exclusive)
linux
linux kernel · 6.14 · update rc1
linux
linux kernel · 6.14 · update rc2
linux
linux kernel · 6.14 · update rc3
linux
Linux · 8763cb45ab967a92a5ee49e9c544c0f0ea90e2d6 to before 61fa824e304ed162fe965f64999068e6fcff2059, 8763cb45ab967a92a5ee49e9c544c0f0ea90e2d6 to before 64397b0cb7c09e3ef3f9f5c7c17299c4eebd3875, 8763cb45ab967a92a5ee49e9c544c0f0ea90e2d6 to before 4f52f7c50f5b6f5eeb06823e21fe546d90f9c595, 8763cb45ab967a92a5ee49e9c544c0f0ea90e2d6 to before 20fb6fc51863fbff7868de8b5f6d249d2094df1f, 8763cb45ab967a92a5ee49e9c544c0f0ea90e2d6 to before 78f579cb7d825134e071a1714d8d0c4fd0ffe459, 8763cb45ab967a92a5ee49e9c544c0f0ea90e2d6 to before 3f9240d59e9a95d19f06120bfd1d0e681c6c0ac7, 8763cb45ab967a92a5ee49e9c544c0f0ea90e2d6 to before 069dd21ea8262204f94737878389c2815a054a9e, 8763cb45ab967a92a5ee49e9c544c0f0ea90e2d6 to before 41cddf83d8b00f29fd105e7a0777366edc69a5cf
Linux
Linux · 4.14
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: mm/migrate_device.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-22022
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-22058
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-22111
Affected technology
linux kernel · from 5.15 (inclusive), before 6.14.2 (exclusive)
linux
Linux · 893b195875340cb44b54c9db99e708145f1210e8 to before f51e471cb1577d510c3096e126678e1ea20d2efd, 893b195875340cb44b54c9db99e708145f1210e8 to before 338a0f3c66aef4ee13052880d02200aae8f2d8a8, 893b195875340cb44b54c9db99e708145f1210e8 to before d767ce15045df510f55cdd2af5df0eee71f928d0, 893b195875340cb44b54c9db99e708145f1210e8 to before 4888e1dcc341e9a132ef7b8516234b3c3296de56, 893b195875340cb44b54c9db99e708145f1210e8 to before 00fe0ac64efd1f5373b3dd9f1f84b19235371e39, 893b195875340cb44b54c9db99e708145f1210e8 to before ed3ba9b6e280e14cc3148c1b226ba453f02fa76c
Linux
Linux · 5.15
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: include/linux/if_bridge.h, net/bridge/br_ioctl.c, net/bridge/br_private.h, net/core/dev_ioctl.c, net/socket.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-22121
Affected technology
linux kernel · from 4.13 (inclusive), before 6.14.2 (exclusive)
linux
Linux · e50e5129f384ae282adebfb561189cdb19b81cee to before 27202452b0bc942fdc3db72a44c4dcdab96d5b56, e50e5129f384ae282adebfb561189cdb19b81cee to before b374e9ecc92aaa7fb2ab221ee3ff5451118ab566, e50e5129f384ae282adebfb561189cdb19b81cee to before c000a8a9b5343a5ef867df173c6349672dacbd0f, e50e5129f384ae282adebfb561189cdb19b81cee to before 3c591353956ffcace2cc74d09930774afed60619, e50e5129f384ae282adebfb561189cdb19b81cee to before 098927a13fd918bd7c64c2de905350a1ad7b4a3a, e50e5129f384ae282adebfb561189cdb19b81cee to before 0c8fbb6ffb3c8f5164572ca88e4ccb6cd6a41ca8, e50e5129f384ae282adebfb561189cdb19b81cee to before 5701875f9609b000d91351eaa6bfd97fe2f157f4
Linux
Linux · 4.13
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: fs/ext4/inode.c, fs/ext4/xattr.c, fs/ext4/xattr.h
Attack conditions (Source advisory, CVSS 3.1): Local · No privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 8.4/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-23143
Affected technology
linux kernel · from 2.6.20 (inclusive), before 5.4.300 (exclusive)
linux
linux kernel · from 5.5 (inclusive), before 5.10.245 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.194 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.153 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.107 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.24 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.13.12 (exclusive)
linux
linux kernel · from 6.14 (inclusive), before 6.14.3 (exclusive)
linux
linux kernel · 6.15 · update rc1
linux
debian linux · 11.0
debian
Linux · ed07536ed6731775219c1df7fa26a7588753e693 to before 83083c5fc7cf9b0f136a42f26aba60da380f3601, ed07536ed6731775219c1df7fa26a7588753e693 to before b7489b753667bc9245958a4896c9419743083c27, ed07536ed6731775219c1df7fa26a7588753e693 to before d51e47e2ab6ef10a317d576075cf625cdbf96426, ed07536ed6731775219c1df7fa26a7588753e693 to before feda73ad44a5cc80f6bf796bb1099a3fe71576d4, ed07536ed6731775219c1df7fa26a7588753e693 to before 905d43b8ad2436c240f844acb3ebcc7a99b8ebf1, ed07536ed6731775219c1df7fa26a7588753e693 to before 5f7f6abd92b6c8dc8f19625ef93c3a18549ede04, ed07536ed6731775219c1df7fa26a7588753e693 to before c11247a21aab4b50a23c8b696727d7483de2f1e1, ed07536ed6731775219c1df7fa26a7588753e693 to before 2155802d3313d7b8365935c6b8d6edc0ddd7eb94, ed07536ed6731775219c1df7fa26a7588753e693 to before 0bb2f7a1ad1f11d861f58e5ee5051c8974ff9569
Linux
Linux · 2.6.20
Linux
SIMATIC CN 4100 · 0 to before V5.0
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: include/net/sock.h, net/core/sock.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-37849
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-38022
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-38057
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-38125
Affected technology
linux kernel · from 5.6 (inclusive), before 6.12.34 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.15.3 (exclusive)
linux
Linux · 8572aec3d0dc43045254fd1bf581fb980bfdbc4b to before b15c9a21950e1af6d440ce5a8edfa8a94b9acb9b, 8572aec3d0dc43045254fd1bf581fb980bfdbc4b to before d6b0f7ed3e9b6c5e2e3a006c8f72c95aa4ac4b74, 8572aec3d0dc43045254fd1bf581fb980bfdbc4b to before b92ec4a848728460f181def33735605f154d438f, 8572aec3d0dc43045254fd1bf581fb980bfdbc4b to before 451ee661d0f6272017fa012f99617101aa8ddf2c, 8572aec3d0dc43045254fd1bf581fb980bfdbc4b to before d5e3bfdba0dc419499b801937128957f77503761, 8572aec3d0dc43045254fd1bf581fb980bfdbc4b to before cbefe2ffa7784525ec5d008ba87c7add19ec631a
Linux
Linux · 5.6
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: drivers/net/ethernet/stmicro/stmmac/stmmac_est.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-38129
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-38232
Affected technology
linux kernel · before 6.12.35 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.15.4 (exclusive)
linux
Linux · bd5ae9288d6451bd346a1b4a59d4fe7e62ba29b7 to before 49b57b98fa601ae6cc7897bab4515129da8290f7, bd5ae9288d6451bd346a1b4a59d4fe7e62ba29b7 to before 88d6785c173a7c4de05bef8c4fd8a9b42ead02d5, bd5ae9288d6451bd346a1b4a59d4fe7e62ba29b7 to before 8120e420013d947c890f358f30a2d98ba8ac20bc, bd5ae9288d6451bd346a1b4a59d4fe7e62ba29b7 to before 2029ca75cdfa6a25716a5a76b751486cce7e3822, bd5ae9288d6451bd346a1b4a59d4fe7e62ba29b7 to before 327011a2bb4f7de9c72b891a96ce8d902828bddf, bd5ae9288d6451bd346a1b4a59d4fe7e62ba29b7 to before f7fb730cac9aafda8b9813b55d04e28a9664d17c, 8677e99150b0830d29cc1318b4cc559e176940bb, 7c7cb07d4affcf41749234fe9dc4d90cd3959e32, 4d41f65efeec0a6da6088341203c81e49ebfcd90, 5.4.102 to before 5.5, 5.10.20 to before 5.11, 5.11.3 to before 5.12
Linux
Linux · 5.12
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: fs/nfsd/nfsctl.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-38236
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-38248
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-38408
Affected technology
linux kernel · from 5.8 (inclusive), before 6.12.37 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.15.6 (exclusive)
linux
linux kernel · 6.16 · update rc1
linux
linux kernel · 6.16 · update rc2
linux
Linux · 337cbeb2c13eb4cab84f576fd402d7ae4ed31ae1 to before 186df821de0f34490ed5fc0861243748b2483861, 337cbeb2c13eb4cab84f576fd402d7ae4ed31ae1 to before c71aa4bb528ae6f8fd7577a0a39e5a03c60b04fb, 337cbeb2c13eb4cab84f576fd402d7ae4ed31ae1 to before ec3656a8cb428d763def32bc2fa695f94be23629, 337cbeb2c13eb4cab84f576fd402d7ae4ed31ae1 to before 19bd7597858dd15802c1d99fcc38e528f469080a, 337cbeb2c13eb4cab84f576fd402d7ae4ed31ae1 to before 7f73d1def72532bac4d55ea8838f457a6bed955c, 337cbeb2c13eb4cab84f576fd402d7ae4ed31ae1 to before 8a2277a3c9e4cc5398f80821afe7ecbe9bdf2819
Linux
Linux · 5.8
Linux
Component: Not specified by the source
File: kernel/irq/irq_sim.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-38556
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-38584
Affected technology
linux kernel · from 2.6.34 (inclusive), before 6.15.10 (exclusive)
linux
linux kernel · from 6.16 (inclusive), before 6.16.1 (exclusive)
linux
Linux · 16295bec6398a3eedc9377e1af6ff4c71b98c300 to before a2048e475e22b13dc3e53d485b7e6e11464ed9a6, 16295bec6398a3eedc9377e1af6ff4c71b98c300 to before 73f132e60857038416540c3599b1de6033d7575a, 16295bec6398a3eedc9377e1af6ff4c71b98c300 to before 609e59193fc6d9dd323f1c6ae1fdd721f1c79680, 16295bec6398a3eedc9377e1af6ff4c71b98c300 to before a11a12a9880ab37342b73c93cfe1a3ada02ff0db, 16295bec6398a3eedc9377e1af6ff4c71b98c300 to before f231d5d001ec75f5886c02d496a4c79edc383d45, 16295bec6398a3eedc9377e1af6ff4c71b98c300 to before dbe3e911a59bda6de96e7cae387ff882c2c177fa, 16295bec6398a3eedc9377e1af6ff4c71b98c300 to before cdf79bd2e1ecb3cc75631c73d8f4149be6019a52, 16295bec6398a3eedc9377e1af6ff4c71b98c300 to before 71203f68c7749609d7fc8ae6ad054bdedeb24f91
Linux
Linux · 2.6.34
Linux
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens
Component: Not specified by the source
Function: correctly, padata_reorder
File: include/linux/padata.h, kernel/padata.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-38591
Affected technology
linux kernel · from 4.13 (inclusive), before 6.16.1 (exclusive)
linux
Linux · f96da09473b52c09125cc9bf7d7d4576ae8229e0 to before 7847c4140e06f6e87229faae22cc38525334c156, f96da09473b52c09125cc9bf7d7d4576ae8229e0 to before feae34c992eb7191862fb1594c704fbbf650fef8, f96da09473b52c09125cc9bf7d7d4576ae8229e0 to before 33660d44e789edb4f303210c813fc56d56377a90, f96da09473b52c09125cc9bf7d7d4576ae8229e0 to before e2e9599f3503df7cf3569d2b6c50d5488fb59435, f96da09473b52c09125cc9bf7d7d4576ae8229e0 to before 058a0da4f6d916a79b693384111bb80a90d73763, f96da09473b52c09125cc9bf7d7d4576ae8229e0 to before 202900ceeef67458c964c2af6e1427c8e533ea7c, f96da09473b52c09125cc9bf7d7d4576ae8229e0 to before e09299225d5ba3916c91ef70565f7d2187e4cca0
Linux
Linux · 4.13
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: kernel/bpf/cgroup.c, net/core/filter.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-39869
Affected technology
linux kernel · from 4.4 (inclusive), before 5.4.300 (exclusive)
linux
linux kernel · from 5.5 (inclusive), before 5.10.245 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.194 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.153 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.107 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.48 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.16.8 (exclusive)
linux
linux kernel · 6.17 · update rc1
linux
linux kernel · 6.17 · update rc2
linux
linux kernel · 6.17 · update rc3
linux
linux kernel · 6.17 · update rc4
linux
linux kernel · 6.17 · update rc5
linux
debian linux · 11.0
debian
Linux · 2b6b3b7420190888793c49e97276e1e73bd7eaed to before 7d4de60d6db02d9b01d5890d5156b04fad65d07a, 2b6b3b7420190888793c49e97276e1e73bd7eaed to before d722de80ce037dccf6931e778f4a46499d51bdf9, 2b6b3b7420190888793c49e97276e1e73bd7eaed to before 301a96cc4dc006c9a285913d301e681cfbf7edb6, 2b6b3b7420190888793c49e97276e1e73bd7eaed to before 5e462fa0dfdb52b3983cf41532d3d4c7d63e2f93, 2b6b3b7420190888793c49e97276e1e73bd7eaed to before 1baed10553fc8b388351d8fc803e3ae6f1a863bc, 2b6b3b7420190888793c49e97276e1e73bd7eaed to before 069fd1688c57c0cc8a3de64d108579b31676f74b, 2b6b3b7420190888793c49e97276e1e73bd7eaed to before d5e82f3f2c918d446df46e8d65f8083fd97cdec5, 2b6b3b7420190888793c49e97276e1e73bd7eaed to before e63419dbf2ceb083c1651852209c7f048089ac0f
Linux
Linux · 4.4
Linux
Component: Not specified by the source
File: drivers/dma/ti/edma.c
Attack conditions (Source advisory, CVSS 3.1): Local · No privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 8.4/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-39873
Affected technology
linux kernel · from 4.19 (inclusive), before 5.15.194 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.153 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.107 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.48 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.16.8 (exclusive)
linux
linux kernel · 6.17 · update rc1
linux
linux kernel · 6.17 · update rc2
linux
linux kernel · 6.17 · update rc3
linux
linux kernel · 6.17 · update rc4
linux
linux kernel · 6.17 · update rc5
linux
debian linux · 11.0
debian
Linux · 1598efe57b3e768056e4ca56cb9cf33111e68d1c to before e202ffd9e54538ef67ec301ebd6d9da4823466c9, 1598efe57b3e768056e4ca56cb9cf33111e68d1c to before 1139321161a3ba5e45e61e0738b37f42f20bc57a, 1598efe57b3e768056e4ca56cb9cf33111e68d1c to before 94b050726288a56a6b8ff55aa641f2fedbd3b44c, 1598efe57b3e768056e4ca56cb9cf33111e68d1c to before 725b33deebd6e4c96fe7893f384510a54258f28f, 1598efe57b3e768056e4ca56cb9cf33111e68d1c to before 668cc1e3bb21101d074e430de1b7ba8fd10189e7, 1598efe57b3e768056e4ca56cb9cf33111e68d1c to before ef79f00be72bd81d2e1e6f060d83cf7e425deee4
Linux
Linux · 4.19
Linux
Component: Not specified by the source
File: drivers/net/can/xilinx_can.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-39876
Affected technology
linux kernel · from 4.19.153 (inclusive), before 4.20 (exclusive)
linux
linux kernel · from 5.4.73 (inclusive), before 5.4.300 (exclusive)
linux
linux kernel · from 5.8.17 (inclusive), before 5.9 (exclusive)
linux
linux kernel · from 5.9.2 (inclusive), before 5.10.245 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.194 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.153 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.107 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.48 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.16.8 (exclusive)
linux
linux kernel · 6.17 · update rc1
linux
linux kernel · 6.17 · update rc2
linux
linux kernel · 6.17 · update rc3
linux
linux kernel · 6.17 · update rc4
linux
linux kernel · 6.17 · update rc5
linux
debian linux · 11.0
debian
Linux · 9e70485b40c8306298adea8bdc867ca27f88955a to before 8c60d12bba14dc655d2d948b1dbf390b3ae39cb8, 64a632da538a6827fad0ea461925cedb9899ebe2 to before 20a3433d31c2d2bf70ab0abec75f3136b42ae66c, 64a632da538a6827fad0ea461925cedb9899ebe2 to before 93a699d6e92cfdfa9eb9dbb8c653b5322542ca4f, 64a632da538a6827fad0ea461925cedb9899ebe2 to before 5f1bb554a131e59b28482abad21f691390651752, 64a632da538a6827fad0ea461925cedb9899ebe2 to before fe78891f296ac05bf4e5295c9829ef822f3c32e7, 64a632da538a6827fad0ea461925cedb9899ebe2 to before 4fe53aaa4271a72fe5fe3e88a45ce01646b68dc5, 64a632da538a6827fad0ea461925cedb9899ebe2 to before eb148d85e126c47d65be34f2a465d69432ca5541, 64a632da538a6827fad0ea461925cedb9899ebe2 to before 03e79de4608bdd48ad6eec272e196124cefaf798, c068e505f229ca5f778f825f1401817ce818e917, 8a6ab151443cd71e2aa5e8b7014e3453dbd51935, ce88b5f42868ef4964c497d4dfcd25e88fd60c5b, 5.4.73 to before 5.4.300, 4.19.153 to before 4.20, 5.8.17 to before 5.9, 5.9.2 to before 5.10
Linux
Linux · 5.10
Linux
Component: Not specified by the source
Function: of_phy_find_device
File: drivers/net/ethernet/freescale/fec_main.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-39880
Affected technology
linux kernel · from 5.11 (inclusive), before 5.15.194 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.153 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.107 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.48 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.16.8 (exclusive)
linux
linux kernel · 6.17 · update rc1
linux
linux kernel · 6.17 · update rc2
linux
linux kernel · 6.17 · update rc3
linux
linux kernel · 6.17 · update rc4
linux
linux kernel · 6.17 · update rc5
linux
debian linux · 11.0
debian
Linux · cd1a677cad994021b19665ed476aea63f5d54f31 to before ea12ab684f8ae8a6da11a22c78d94a79e2163096, cd1a677cad994021b19665ed476aea63f5d54f31 to before 591ea9c30737663a471b2bb07b27ddde86b020d5, cd1a677cad994021b19665ed476aea63f5d54f31 to before 23538cfbeed87159a5ac6c61e7a6de3d8d4486a8, cd1a677cad994021b19665ed476aea63f5d54f31 to before 35dbbc3dbf8bccb2d77c68444f42c1e6d2d27983, cd1a677cad994021b19665ed476aea63f5d54f31 to before 6bd8b56899be0b514945f639a89ccafb8f8dfaef, cd1a677cad994021b19665ed476aea63f5d54f31 to before cdbc9836c7afadad68f374791738f118263c5371
Linux
Linux · 5.11
Linux
Component: Not specified by the source
File: net/ceph/messenger.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-39883
Affected technology
linux kernel · from 4.13 (inclusive), before 5.4.300 (exclusive)
linux
linux kernel · from 5.5 (inclusive), before 5.10.245 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.194 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.153 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.107 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.48 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.16.8 (exclusive)
linux
linux kernel · 6.17 · update rc1
linux
linux kernel · 6.17 · update rc2
linux
linux kernel · 6.17 · update rc3
linux
linux kernel · 6.17 · update rc4
linux
linux kernel · 6.17 · update rc5
linux
debian linux · 11.0
debian
Linux · f1dd2cd13c4bbbc9a7c4617b3b034fa643de98fe to before 8e01ea186a52c90694c08a9ff57bea1b0e78256a, f1dd2cd13c4bbbc9a7c4617b3b034fa643de98fe to before fb65803ccff37cf9123c50c1c02efd1ed73c4ed5, f1dd2cd13c4bbbc9a7c4617b3b034fa643de98fe to before 99f7048957f5ae3cee1c01189147e73a9a96de02, f1dd2cd13c4bbbc9a7c4617b3b034fa643de98fe to before e4ec6def5643a1c9511115b3884eb879572294c6, f1dd2cd13c4bbbc9a7c4617b3b034fa643de98fe to before 3d278e89c2ea62b1aaa4b0d8a9766a35b3a3164a, f1dd2cd13c4bbbc9a7c4617b3b034fa643de98fe to before 7618fd443aa4cfa553a64cacf5721581653ee7b0, f1dd2cd13c4bbbc9a7c4617b3b034fa643de98fe to before 63a327a2375a8ce7a47dec5aaa4d8a9ae0a00b96, f1dd2cd13c4bbbc9a7c4617b3b034fa643de98fe to before d613f53c83ec47089c4e25859d5e8e0359f6f8da
Linux
Linux · 4.13
Linux
Component: Not specified by the source
File: mm/memory-failure.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-39885
Affected technology
linux kernel · from 2.6.28 (inclusive), before 5.4.300 (exclusive)
linux
linux kernel · from 5.5 (inclusive), before 5.10.245 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.194 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.153 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.107 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.48 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.16.8 (exclusive)
linux
linux kernel · 6.17 · update rc1
linux
linux kernel · 6.17 · update rc2
linux
linux kernel · 6.17 · update rc3
linux
linux kernel · 6.17 · update rc4
linux
linux kernel · 6.17 · update rc5
linux
debian linux · 11.0
debian
Linux · 00dc417fa3e763345b34ccb6034d72de76eea0a1 to before 16e518ca84dfe860c20a62f3615e14e8af0ace57, 00dc417fa3e763345b34ccb6034d72de76eea0a1 to before 7e1514bd44ef68007703c752c99ff7319f35bce6, 00dc417fa3e763345b34ccb6034d72de76eea0a1 to before ef30404980e4c832ef9bba1b10c08f67fa77a9ec, 00dc417fa3e763345b34ccb6034d72de76eea0a1 to before 36054554772f95d090eb45793faf6aa3c0254b02, 00dc417fa3e763345b34ccb6034d72de76eea0a1 to before 0709bc11b942870fc0a7be150e42aea42321093a, 00dc417fa3e763345b34ccb6034d72de76eea0a1 to before 1d3c96547ee2ddeaddf8f19a3ef99ea06cc8115e, 00dc417fa3e763345b34ccb6034d72de76eea0a1 to before 9efcb7a8b97310efed995397941a292cf89fa94f, 00dc417fa3e763345b34ccb6034d72de76eea0a1 to before 04100f775c2ea501927f508f17ad824ad1f23c8d
Linux
Linux · 2.6.28
Linux
Component: Not specified by the source
File: fs/ocfs2/extent_map.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-39907
Affected technology
linux kernel · from 5.1 (inclusive), before 5.4.300 (exclusive)
linux
linux kernel · from 5.5 (inclusive), before 5.10.245 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.194 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.153 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.107 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.48 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.16.8 (exclusive)
linux
linux kernel · 6.17 · update rc1
linux
linux kernel · 6.17 · update rc2
linux
linux kernel · 6.17 · update rc3
linux
linux kernel · 6.17 · update rc4
linux
linux kernel · 6.17 · update rc5
linux
debian linux · 11.0
debian
Linux · 2cd457f328c100bc98e36d55fe210e9ab067c704 to before dc1c6e60993b93b87604eb11266ac72e1a3be9e0, 2cd457f328c100bc98e36d55fe210e9ab067c704 to before dfe2ac47a6ee0ab50393694517c54ef1e276dda3, 2cd457f328c100bc98e36d55fe210e9ab067c704 to before e32a2ea52b51368774d014e5bcd9b86110a2b727, 2cd457f328c100bc98e36d55fe210e9ab067c704 to before 75686c49574dd5f171ca682c18717787f1d8d55e, 2cd457f328c100bc98e36d55fe210e9ab067c704 to before 06d8ef8f853752fea88c8d5bb093a40e71b330cf, 2cd457f328c100bc98e36d55fe210e9ab067c704 to before 26adba1e7d7924174e15a3ba4b1132990786300b, 2cd457f328c100bc98e36d55fe210e9ab067c704 to before f6fd98d961fa6f97347cead4f08ed862cbbb91ff, 2cd457f328c100bc98e36d55fe210e9ab067c704 to before 513c40e59d5a414ab763a9c84797534b5e8c208d
Linux
Linux · 5.1
Linux
Component: Not specified by the source
File: drivers/mtd/nand/raw/stm32_fmc2_nand.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-39911
Affected technology
linux kernel · from 3.13 (inclusive), before 5.4.300 (exclusive)
linux
linux kernel · from 5.5 (inclusive), before 5.10.245 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.194 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.153 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.107 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.48 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.16.8 (exclusive)
linux
linux kernel · 6.17 · update rc1
linux
linux kernel · 6.17 · update rc2
linux
linux kernel · 6.17 · update rc3
linux
linux kernel · 6.17 · update rc4
linux
linux kernel · 6.17 · update rc5
linux
debian linux · 11.0
debian
Linux · 493fb30011b3ab5173cef96f1d1ce126da051792 to before 13ab9adef3cd386511c930a9660ae06595007f89, 493fb30011b3ab5173cef96f1d1ce126da051792 to before 6e4016c0dca53afc71e3b99e24252b63417395df, 493fb30011b3ab5173cef96f1d1ce126da051792 to before b9721a023df38cf44a88f2739b4cf51efd051f85, 493fb30011b3ab5173cef96f1d1ce126da051792 to before b905b2acb3a0bbb08ad9be9984d8cdabdf827315, 493fb30011b3ab5173cef96f1d1ce126da051792 to before 23431998a37764c464737b855c71a81d50992e98, 493fb30011b3ab5173cef96f1d1ce126da051792 to before a30afd6617c30aaa338d1dbcb1e34e7a1890085c, 493fb30011b3ab5173cef96f1d1ce126da051792 to before c62580674ce5feb1be4f90b5873ff3ce50e0a1db, 493fb30011b3ab5173cef96f1d1ce126da051792 to before 915470e1b44e71d1dd07ee067276f003c3521ee3
Linux
Linux · 3.13
Linux
Component: Not specified by the source
File: drivers/net/ethernet/intel/i40e/i40e_main.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-39913
Affected technology
linux kernel · from 4.17 (inclusive), before 5.4.300 (exclusive)
linux
linux kernel · from 5.5 (inclusive), before 5.10.245 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.194 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.153 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.107 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.48 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.16.8 (exclusive)
linux
linux kernel · 6.17 · update rc1
linux
linux kernel · 6.17 · update rc2
linux
linux kernel · 6.17 · update rc3
linux
linux kernel · 6.17 · update rc4
linux
linux kernel · 6.17 · update rc5
linux
debian linux · 11.0
debian
Linux · 4f738adba30a7cfc006f605707e7aee847ffefa0 to before 08f58d10f5abf11d297cc910754922498c921f91, 4f738adba30a7cfc006f605707e7aee847ffefa0 to before 05366527f44cf4b884f3d9462ae8009be9665856, 4f738adba30a7cfc006f605707e7aee847ffefa0 to before 7429b8b9bfbc276fd304fbaebc405f46b421fedf, 4f738adba30a7cfc006f605707e7aee847ffefa0 to before 9c2a6456bdf9794474460d885c359b6c4522d6e3, 4f738adba30a7cfc006f605707e7aee847ffefa0 to before 66bcb04a441fbf15d66834b7e3eefb313dd750c8, 4f738adba30a7cfc006f605707e7aee847ffefa0 to before 539920180c55f5e13a2488a2339f94e6b8cb69e0, 4f738adba30a7cfc006f605707e7aee847ffefa0 to before de89e58368f8f07df005ecc1c86ad94898a999f2, 4f738adba30a7cfc006f605707e7aee847ffefa0 to before a3967baad4d533dc254c31e0d221e51c8d223d58
Linux
Linux · 4.17
Linux
RUGGEDCOM RST2428P · 0 to before V4.0
Siemens
Component: Not specified by the source
File: net/ipv4/tcp_bpf.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-39923
Affected technology
linux kernel · from 4.9.104 (inclusive), before 4.10 (exclusive)
linux
linux kernel · from 4.14.45 (inclusive), before 4.15 (exclusive)
linux
linux kernel · from 4.16.13 (inclusive), before 5.4.300 (exclusive)
linux
linux kernel · from 5.5 (inclusive), before 5.10.245 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.194 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.153 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.107 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.48 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.16.8 (exclusive)
linux
linux kernel · 6.17 · update rc1
linux
linux kernel · 6.17 · update rc2
linux
linux kernel · 6.17 · update rc3
linux
linux kernel · 6.17 · update rc4
linux
linux kernel · 6.17 · update rc5
linux
debian linux · 11.0
debian
Linux · 48d163b1aa6e7f650c0b7a4f9c61c387a6def868 to before 2e257a6125c63350f00dc42b9674f20fd3cf4a9f, 48d163b1aa6e7f650c0b7a4f9c61c387a6def868 to before 1d98ba204d8a6db0d986c7f1aefaa0dcd1c007a2, 48d163b1aa6e7f650c0b7a4f9c61c387a6def868 to before 6ac1599d0e78036d9d08efc2f58c2d91f0a3ee4c, 48d163b1aa6e7f650c0b7a4f9c61c387a6def868 to before 555bd16351a35c79efb029a196975a5a27f7fbc4, 48d163b1aa6e7f650c0b7a4f9c61c387a6def868 to before ebf6c7c908e5999531c3517289598f187776124f, 48d163b1aa6e7f650c0b7a4f9c61c387a6def868 to before 1fc14731f0be4885e60702b9596d14d9a79cf053, 48d163b1aa6e7f650c0b7a4f9c61c387a6def868 to before 0ff9df758af7022d749718fb6b8385cc5693acf3, 48d163b1aa6e7f650c0b7a4f9c61c387a6def868 to before 5068b5254812433e841a40886e695633148d362d, cecf8a69042b3a54cb843223756c10ee8a8665e3, 909474cd384cb206f33461fbd18089cf170533f8, 5e0986f7caf17d7b1acd2092975360bf8e88a57d, 4.9.104 to before 4.10, 4.14.45 to before 4.15, 4.16.13 to before 4.17
Linux
Linux · 4.17
Linux
Component: Not specified by the source
File: drivers/dma/qcom/bam_dma.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-39934
Affected technology
linux kernel · from 5.11 (inclusive), before 5.15.194 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.154 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.108 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.49 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.16.9 (exclusive)
linux
linux kernel · 6.17 · update rc1
linux
linux kernel · 6.17 · update rc2
linux
linux kernel · 6.17 · update rc3
linux
linux kernel · 6.17 · update rc4
linux
linux kernel · 6.17 · update rc5
linux
linux kernel · 6.17 · update rc6
linux
Linux · 8bdfc5dae4e3ba4d99dfb430ef43249e5f1b7730 to before 51a501e990a353a4f15da6bab295b28e5d118f64, 8bdfc5dae4e3ba4d99dfb430ef43249e5f1b7730 to before f9a089d0a6d537d0f2061c8a37a7de535ce0310e, 8bdfc5dae4e3ba4d99dfb430ef43249e5f1b7730 to before 15a77e1ab0a994d69b471c76b8d01117128dda26, 8bdfc5dae4e3ba4d99dfb430ef43249e5f1b7730 to before 0da73f7827691a5e2265b110d5fe12f29535ec92, 8bdfc5dae4e3ba4d99dfb430ef43249e5f1b7730 to before 1a7ea294d57fb61485d11b3f2241d631d73025cb, 8bdfc5dae4e3ba4d99dfb430ef43249e5f1b7730 to before a10f910c77f280327b481e77eab909934ec508f0
Linux
Linux · 5.11
Linux
Component: Not specified by the source
File: drivers/gpu/drm/bridge/analogix/anx7625.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-39937
Affected technology
linux kernel · from 4.6 (inclusive), before 5.4.300 (exclusive)
linux
linux kernel · from 5.5 (inclusive), before 5.10.245 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.194 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.154 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.108 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.49 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.16.9 (exclusive)
linux
linux kernel · 6.17 · update rc1
linux
linux kernel · 6.17 · update rc2
linux
linux kernel · 6.17 · update rc3
linux
linux kernel · 6.17 · update rc4
linux
linux kernel · 6.17 · update rc5
linux
linux kernel · 6.17 · update rc6
linux
Linux · 7d5e9737efda16535e5b54bd627ef4881d11d31f to before 184f608a68f96794e8fe58cd5535014d53622cde, 7d5e9737efda16535e5b54bd627ef4881d11d31f to before 8793e7a8e1b60131a825457174ed6398111daeb7, 7d5e9737efda16535e5b54bd627ef4881d11d31f to before ada2282259243387e6b6e89239aeb4897e62f051, 7d5e9737efda16535e5b54bd627ef4881d11d31f to before 47ade5f9d70b23a119ec20b1c6504864b2543a79, 7d5e9737efda16535e5b54bd627ef4881d11d31f to before 689aee35ce671aab752f159e5c8e66d7685e6887, 7d5e9737efda16535e5b54bd627ef4881d11d31f to before 21ba85d9d508422ca9e6698463ff9357c928c22d, 7d5e9737efda16535e5b54bd627ef4881d11d31f to before 21a39b958b4bcf44f7674bfbbe1bbb8cad0d842d, 7d5e9737efda16535e5b54bd627ef4881d11d31f to before b6f56a44e4c1014b08859dcf04ed246500e310e5
Linux
Linux · 4.6
Linux
Component: Not specified by the source
File: net/rfkill/rfkill-gpio.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-39943
Affected technology
linux kernel · from 5.15.1 (inclusive), before 5.15.194 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.154 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.108 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.49 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.16.9 (exclusive)
linux
linux kernel · 5.15
linux
linux kernel · 5.15 · update rc7
linux
linux kernel · 6.17 · update rc1
linux
linux kernel · 6.17 · update rc2
linux
linux kernel · 6.17 · update rc3
linux
linux kernel · 6.17 · update rc4
linux
linux kernel · 6.17 · update rc5
linux
linux kernel · 6.17 · update rc6
linux
Linux · 2ea086e35c3d726a3bacd0a971c1f02a50e98206 to before 773fddf976d282ef059c36c575ddb81567acd6bc, 2ea086e35c3d726a3bacd0a971c1f02a50e98206 to before bdaab5c6538e250a9654127e688ecbbeb6f771d5, 2ea086e35c3d726a3bacd0a971c1f02a50e98206 to before eb0378dde086363046ed3d7db7f126fc3f76fd70, 2ea086e35c3d726a3bacd0a971c1f02a50e98206 to before 8be498fcbd5b07272f560b45981d4b9e5a2ad885, 2ea086e35c3d726a3bacd0a971c1f02a50e98206 to before 529b121b00a6ee3c88fb3c01b443b2b81f686d48, 2ea086e35c3d726a3bacd0a971c1f02a50e98206 to before 5282491fc49d5614ac6ddcd012e5743eecb6a67c
Linux
Linux · 5.15
Linux
Component: Not specified by the source
File: fs/smb/server/transport_rdma.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 9.4/10) rates confidentiality and availability impact as high; integrity impact as low. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-39945
Affected technology
linux kernel · from 2.6.37 (inclusive), before 5.4.300 (exclusive)
linux
linux kernel · from 5.5 (inclusive), before 5.10.245 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.194 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.154 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.108 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.49 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.16.9 (exclusive)
linux
linux kernel · 6.17 · update rc1
linux
linux kernel · 6.17 · update rc2
linux
linux kernel · 6.17 · update rc3
linux
linux kernel · 6.17 · update rc4
linux
linux kernel · 6.17 · update rc5
linux
linux kernel · 6.17 · update rc6
linux
Linux · fdf24086f4752aee5dfb40143c736250df017820 to before fde6e73189f40ebcf0633aed2b68e731c25f3aa3, fdf24086f4752aee5dfb40143c736250df017820 to before 7b6a5b0a6b392263c3767fc945b311ea04b34bbd, fdf24086f4752aee5dfb40143c736250df017820 to before 0405055930264ea8fd26f4131466fa7652e5e47d, fdf24086f4752aee5dfb40143c736250df017820 to before e1fcd4a9c09feac0902a65615e866dbf22616125, fdf24086f4752aee5dfb40143c736250df017820 to before 8eeb2091e72d75df8ceaa2172638d61b4cf8929a, fdf24086f4752aee5dfb40143c736250df017820 to before 6e33a7eed587062ca8161ad1f4584882a860d697, fdf24086f4752aee5dfb40143c736250df017820 to before 0627e1481676669cae2df0d85b5ff13e7d24c390, fdf24086f4752aee5dfb40143c736250df017820 to before cfa7d9b1e3a8604afc84e9e51d789c29574fb216
Linux
Linux · 2.6.37
Linux
Component: Not specified by the source
File: drivers/net/ethernet/broadcom/cnic.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
A local attacker with low privileges could trigger a use-after-free error. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not state a further attacker outcome.
CVE-2025-39949
Affected technology
linux kernel · from 4.18 (inclusive), before 5.10.245 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.194 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.154 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.108 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.49 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.16.9 (exclusive)
linux
linux kernel · 6.17 · update rc1
linux
linux kernel · 6.17 · update rc2
linux
linux kernel · 6.17 · update rc3
linux
linux kernel · 6.17 · update rc4
linux
linux kernel · 6.17 · update rc5
linux
linux kernel · 6.17 · update rc6
linux
Linux · d52c89f120de849575f6b2e5948038f2be12ce6f to before 25672c620421fa2105703a94a29a03487245e6d6, d52c89f120de849575f6b2e5948038f2be12ce6f to before e0e24571a7b2f8c8f06e25d3417253ebbdbc8d5c, d52c89f120de849575f6b2e5948038f2be12ce6f to before 8141910869596b7a3a5d9b46107da2191d523f82, d52c89f120de849575f6b2e5948038f2be12ce6f to before ea53e6a47e148b490b1c652fc65d2de5a086df76, d52c89f120de849575f6b2e5948038f2be12ce6f to before 660b2a8f5a306a28c7efc1b4990ecc4912a68f87, d52c89f120de849575f6b2e5948038f2be12ce6f to before 70affe82e38fd3dc76b9c68b5a1989f11e7fa0f3, d52c89f120de849575f6b2e5948038f2be12ce6f to before 56c0a2a9ddc2f5b5078c5fb0f81ab76bbc3d4c37
Linux
Linux · 4.18
Linux
Component: Not specified by the source
File: drivers/net/ethernet/qlogic/qed/qed_debug.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-39951
Affected technology
linux kernel · from 5.5 (inclusive), before 5.10.245 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.194 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.154 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.108 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.49 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.16.9 (exclusive)
linux
linux kernel · 6.17 · update rc1
linux
linux kernel · 6.17 · update rc2
linux
linux kernel · 6.17 · update rc3
linux
linux kernel · 6.17 · update rc4
linux
linux kernel · 6.17 · update rc5
linux
linux kernel · 6.17 · update rc6
linux
Linux · 04e5b1fb01834a602acaae2276b67a783a8c6159 to before 14c231959a16ca41bfdcaede72483362a8c645d7, 04e5b1fb01834a602acaae2276b67a783a8c6159 to before 5e94e44c9cb30d7a383d8ac227f24a8c9326b770, 04e5b1fb01834a602acaae2276b67a783a8c6159 to before aaf900a83508c8cd5cdf765e7749f9076196ec7f, 04e5b1fb01834a602acaae2276b67a783a8c6159 to before 4f364023ddcfe83f7073b973a9cb98584b7f2a46, 04e5b1fb01834a602acaae2276b67a783a8c6159 to before 00e98b5a69034b251bb36dc6e7123d7648e218e4, 04e5b1fb01834a602acaae2276b67a783a8c6159 to before c2ff91255e0157b356cff115d8dc3eeb5162edf2, 04e5b1fb01834a602acaae2276b67a783a8c6159 to before 7ebf70cf181651fe3f2e44e95e7e5073d594c9c0
Linux
Linux · 5.5
Linux
Component: Not specified by the source
File: arch/um/drivers/virtio_uml.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
A local attacker with low privileges can trigger a use-after-free error. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not state a further attacker outcome.
CVE-2025-39953
Affected technology
linux kernel · from 4.6 (inclusive), before 5.4.300 (exclusive)
linux
linux kernel · from 5.5 (inclusive), before 5.10.245 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.194 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.154 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.108 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.49 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.16.9 (exclusive)
linux
linux kernel · 6.17 · update rc1
linux
linux kernel · 6.17 · update rc2
linux
linux kernel · 6.17 · update rc3
linux
linux kernel · 6.17 · update rc4
linux
linux kernel · 6.17 · update rc5
linux
linux kernel · 6.17 · update rc6
linux
Linux · 334c3679ec4b2b113c35ebe37d2018b112dd5013 to before cabadd7fd15f97090f752fd22dd7f876a0dc3dc4, 334c3679ec4b2b113c35ebe37d2018b112dd5013 to before a0c896bda7077aa5005473e2c5b3c27173313b4c, 334c3679ec4b2b113c35ebe37d2018b112dd5013 to before f2795d1b92506e3adf52a298f7181032a1525e04, 334c3679ec4b2b113c35ebe37d2018b112dd5013 to before 993049c9b1355c78918344a6403427d53f9ee700, 334c3679ec4b2b113c35ebe37d2018b112dd5013 to before 4a1e3ec28e8062cd9f339aa6a942df9c5bcb6811, 334c3679ec4b2b113c35ebe37d2018b112dd5013 to before ded4d207a3209a834b6831ceec7f39b934c74802, 334c3679ec4b2b113c35ebe37d2018b112dd5013 to before 05e0b03447cf215ec384210441b34b7a3b16e8b0, 334c3679ec4b2b113c35ebe37d2018b112dd5013 to before 79f919a89c9d06816dbdbbd168fa41d27411a7f9
Linux
Linux · 4.6
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: kernel/cgroup/cgroup.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-39955
Affected technology
linux kernel · from 3.7 (inclusive), before 5.4.300 (exclusive)
linux
linux kernel · from 5.5 (inclusive), before 5.10.245 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.194 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.154 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.108 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.49 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.16.9 (exclusive)
linux
linux kernel · 6.17 · update rc1
linux
linux kernel · 6.17 · update rc2
linux
linux kernel · 6.17 · update rc3
linux
linux kernel · 6.17 · update rc4
linux
linux kernel · 6.17 · update rc5
linux
linux kernel · 6.17 · update rc6
linux
Linux · 8336886f786fdacbc19b719c1f7ea91eb70706d4 to before 7ec092a91ff351dcde89c23e795b73a328274db6, 8336886f786fdacbc19b719c1f7ea91eb70706d4 to before a4378dedd6e07e62f2fccb17d78c9665718763d0, 8336886f786fdacbc19b719c1f7ea91eb70706d4 to before 33a4fdf0b4a25f8ce65380c3b0136b407ca57609, 8336886f786fdacbc19b719c1f7ea91eb70706d4 to before 17d699727577814198d744d6afe54735c6b54c99, 8336886f786fdacbc19b719c1f7ea91eb70706d4 to before dfd06131107e7b699ef1e2a24ed2f7d17c917753, 8336886f786fdacbc19b719c1f7ea91eb70706d4 to before fa4749c065644af4db496b338452a69a3e5147d9, 8336886f786fdacbc19b719c1f7ea91eb70706d4 to before ae313d14b45eca7a6bb29cb9bf396d977e7d28fb, 8336886f786fdacbc19b719c1f7ea91eb70706d4 to before 45c8a6cc2bcd780e634a6ba8e46bffbdf1fc5c01
Linux
Linux · 3.7
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: net/ipv4/tcp.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-39967
Affected technology
linux kernel · from 4.4.235 (inclusive), before 4.5 (exclusive)
linux
linux kernel · from 4.9.235 (inclusive), before 4.10 (exclusive)
linux
linux kernel · from 4.14.196 (inclusive), before 4.15 (exclusive)
linux
linux kernel · from 4.19.143 (inclusive), before 4.20 (exclusive)
linux
linux kernel · from 5.4.62 (inclusive), before 5.4.300 (exclusive)
linux
linux kernel · from 5.8.6 (inclusive), before 5.9 (exclusive)
linux
linux kernel · from 5.9.1 (inclusive), before 5.10.245 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.194 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.155 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.109 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.50 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.16.10 (exclusive)
linux
linux kernel · 5.9
linux
linux kernel · 5.9 · update rc3
linux
linux kernel · 5.9 · update rc4
linux
linux kernel · 5.9 · update rc5
linux
linux kernel · 5.9 · update rc6
linux
linux kernel · 5.9 · update rc7
linux
linux kernel · 5.9 · update rc8
linux
linux kernel · 6.17 · update rc1
linux
linux kernel · 6.17 · update rc2
linux
linux kernel · 6.17 · update rc3
linux
linux kernel · 6.17 · update rc4
linux
linux kernel · 6.17 · update rc5
linux
linux kernel · 6.17 · update rc6
linux
linux kernel · 6.17 · update rc7
linux
Linux · 96e41fc29e8af5c5085fb8a79cab8d0d00bab86c to before 994bdc2d23c79087fbf7dcd9544454e8ebcef877, 39b3cffb8cf3111738ea993e2757ab382253d86a to before 9c8ec14075c5317edd6b242f1be8167aa1e4e333, 39b3cffb8cf3111738ea993e2757ab382253d86a to before b8a6e85328aeb9881531dbe89bcd2637a06c3c95, 39b3cffb8cf3111738ea993e2757ab382253d86a to before a6eb9f423b3db000aaedf83367b8539f6b72dcfc, 39b3cffb8cf3111738ea993e2757ab382253d86a to before adac90bb1aaf45ca66f9db8ac100be16750ace78, 39b3cffb8cf3111738ea993e2757ab382253d86a to before 4a4bac869560f943edbe3c2b032062f6673b13d3, 39b3cffb8cf3111738ea993e2757ab382253d86a to before c0c01f9aa08c8e10e10e8c9ebb5be01a4eff6eb7, 39b3cffb8cf3111738ea993e2757ab382253d86a to before 1a194e6c8e1ee745e914b0b7f50fa86c89ed13fe, ae021a904ac82d9fc81c25329d3c465c5a7d5686, 451bffa366f2cc0e5314807cb847f31c0226efed, 2c455e9c5865861f5ce09c5f596909495ed7657c, 72f099805dbc907fbe8fa19bccdc31d3e2ee6e9e, 34cf1aff169dc6dedad8d79da7bf1b4de2773dbc, 5.4.62 to before 5.4.300, 4.4.235 to before 4.5, 4.9.235 to before 4.10, 4.14.196 to before 4.15, 4.19.143 to before 4.20, 5.8.6 to before 5.9
Linux
Linux · 5.9
Linux
Component: Not specified by the source
File: drivers/video/fbdev/core/fbcon.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-39968
Affected technology
Linux · e284fc280473bed23f2e1ed324e102a48f7d17e1 to before 9176e18681cb0d34c5acc87bda224f5652af2ab8, e284fc280473bed23f2e1ed324e102a48f7d17e1 to before e490d8c5a54e0dd1ab22417d72c3a7319cf0f030, e284fc280473bed23f2e1ed324e102a48f7d17e1 to before 77a35be582dff4c80442ebcdce24d45eed8a6ce4, e284fc280473bed23f2e1ed324e102a48f7d17e1 to before 02aae5fcdd34c3a55a243d80a1b328a35852a35c, e284fc280473bed23f2e1ed324e102a48f7d17e1 to before edecce7abd7152b48e279b4fa0a883d1839bb577, e284fc280473bed23f2e1ed324e102a48f7d17e1 to before d33e5d6631ac4fddda235a7815babc9d3f124299, e284fc280473bed23f2e1ed324e102a48f7d17e1 to before 8b13df5aa877b9e4541e301a58a84c42d84d2d9a, e284fc280473bed23f2e1ed324e102a48f7d17e1 to before cb79fa7118c150c3c76a327894bb2eb878c02619
Linux
Linux · 4.17
Linux
Component: Not specified by the source
File: drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.3/10) rates confidentiality impact as none; integrity impact as low; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-39969
Affected technology
Linux · 171527da84149c2c7aa6a60a64b09d24f3546298 to before 185745d56ec958bf8aa773828213237dfcc32f5a, eb87117c27e729b0aeef4d72ed40d6a1761b0f68 to before f47876788a23de296c42ef9d505b5c1630f0b4b8, 2132643b956f553f5abddc9bae20dae267b082e0 to before 8e35c80f8570426fe0f0cc92b151ebd835975f22, 61125b8be85dfbc7e9c7fe1cc6c6d631ab603516 to before 6c3981fd59ef11a75005ac9978f034da5a168b6a, 61125b8be85dfbc7e9c7fe1cc6c6d631ab603516 to before e748f1ee493f88e38b77363a60499f979d42c58a, 61125b8be85dfbc7e9c7fe1cc6c6d631ab603516 to before 6128bbc7adc25c87c2f64b5eb66a280b78ef7ab7, 61125b8be85dfbc7e9c7fe1cc6c6d631ab603516 to before a991dc56d3e9a2c3db87d0c3f03c24f6595400f1, 61125b8be85dfbc7e9c7fe1cc6c6d631ab603516 to before 877b7e6ffc23766448236e8732254534c518ba42, 5.4.165 to before 5.4.300, 5.10.85 to before 5.10.245, 5.15.8 to before 5.15.194
Linux
Linux · 5.16
Linux
Component: Not specified by the source
File: drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c, drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.h
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-39970
Affected technology
Linux · e284fc280473bed23f2e1ed324e102a48f7d17e1 to before a88c1b2746eccf00e2094b187945f0f1e990b400, e284fc280473bed23f2e1ed324e102a48f7d17e1 to before 28465770ca3b694286ff9ed6dfd558413f57d98f, e284fc280473bed23f2e1ed324e102a48f7d17e1 to before f8c8e11825b24661596fa8db2f0981ba17ed0817, e284fc280473bed23f2e1ed324e102a48f7d17e1 to before 461e0917eedcd159d87f3ea846754a1e07d7e78a, e284fc280473bed23f2e1ed324e102a48f7d17e1 to before 3883e9702b6a4945e93b16c070f338a9f5b496f9, e284fc280473bed23f2e1ed324e102a48f7d17e1 to before 3118f41d8fa57b005f53ec3db2ba5eab1d7ba12b, e284fc280473bed23f2e1ed324e102a48f7d17e1 to before 560e1683410585fbd5df847f43433c4296f0d222, e284fc280473bed23f2e1ed324e102a48f7d17e1 to before 9739d5830497812b0bdeaee356ddefbe60830b88
Linux
Linux · 4.17
Linux
Component: Not specified by the source
File: drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-39971
Affected technology
Linux · c27eac48160de72dee33d42b5a33cc7b8a2eb1f5 to before a6ff2af78343eceb0f77ab1a2fe802183bc21648, c27eac48160de72dee33d42b5a33cc7b8a2eb1f5 to before f5f91d164af22e7147130ef8bebbdb28d8ecc6e2, c27eac48160de72dee33d42b5a33cc7b8a2eb1f5 to before 1fa0aadade34481c567cdf4a897c0d4e4d548bd1, c27eac48160de72dee33d42b5a33cc7b8a2eb1f5 to before 8b9c7719b0987b1c6c5fc910599f3618a558dbde, c27eac48160de72dee33d42b5a33cc7b8a2eb1f5 to before 2cc26dac0518d2fa9b67ec813ee60e183480f98a, c27eac48160de72dee33d42b5a33cc7b8a2eb1f5 to before bfcc1dff429d4b99ba03e40ddacc68ea4be2b32b, c27eac48160de72dee33d42b5a33cc7b8a2eb1f5 to before 5c1f96123113e0bdc6d8dc2b0830184c93da9f65, c27eac48160de72dee33d42b5a33cc7b8a2eb1f5 to before f1ad24c5abe1eaef69158bac1405a74b3c365115
Linux
Linux · 4.17
Linux
Component: Not specified by the source
File: drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-39972
Affected technology
Linux · c27eac48160de72dee33d42b5a33cc7b8a2eb1f5 to before b6cb93a7ff208f324c7ec581d72995f80e115e0e, c27eac48160de72dee33d42b5a33cc7b8a2eb1f5 to before 6f15a7b34fae75e745bdc2ec05e06ddfd0dd2f3c, c27eac48160de72dee33d42b5a33cc7b8a2eb1f5 to before 34dfac0c904829967d500c51f216916ce1452957, c27eac48160de72dee33d42b5a33cc7b8a2eb1f5 to before 4d5e804a9e19b639b18fd13664dbad3c03c79e61, c27eac48160de72dee33d42b5a33cc7b8a2eb1f5 to before 50a1e2f50f6c22b93b94eb8d168a1be3c05bf5cd, c27eac48160de72dee33d42b5a33cc7b8a2eb1f5 to before cc4191e8ef40d2249c1b9a8617d22ec8a976b574, c27eac48160de72dee33d42b5a33cc7b8a2eb1f5 to before d4e3eaaa3cb3af77836d806c89cd6ebf533a7320, c27eac48160de72dee33d42b5a33cc7b8a2eb1f5 to before aa68d3c3ac8d1dcec40d52ae27e39f6d32207009
Linux
Linux · 4.17
Linux
Component: Not specified by the source
File: drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-39973
Affected technology
Linux · 5c3c48ac6bf56367c4e89f6453cd2d61e50375bd to before 0543d40d6513cdf1c7882811086e59a6455dfe97, 5c3c48ac6bf56367c4e89f6453cd2d61e50375bd to before 7d749e38dd2b7e8a80da2ca30c93e09de95bfcf9, 5c3c48ac6bf56367c4e89f6453cd2d61e50375bd to before 45a7527cd7da4cdcf3b06b5c0cb1cae30b5a5985, 5c3c48ac6bf56367c4e89f6453cd2d61e50375bd to before d3b0d3f8d11fa957171fbb186e53998361a88d4e, 5c3c48ac6bf56367c4e89f6453cd2d61e50375bd to before c0c83f4cd074b75cecef107bfc349be7d516c9c4, 5c3c48ac6bf56367c4e89f6453cd2d61e50375bd to before 05fe81fb9db20464fa532a3835dc8300d68a2f84, 5c3c48ac6bf56367c4e89f6453cd2d61e50375bd to before afec12adab55d10708179a64d95d650741e60fe0, 5c3c48ac6bf56367c4e89f6453cd2d61e50375bd to before 55d225670def06b01af2e7a5e0446fbe946289e8
Linux
Linux · 3.12
Linux
Component: Not specified by the source
File: drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-39980
Affected technology
Linux · 38428d68719c454d269cb03b776d8a4b0ad66111 to before e1e87ac0daacd51f522ecd1645cd76b5809303ed, 38428d68719c454d269cb03b776d8a4b0ad66111 to before 0e7bfe7a268ccbd7859730c529161cafbf44637c, 38428d68719c454d269cb03b776d8a4b0ad66111 to before ec428fff792b7bd15b248dafca2e654b666b1304, 38428d68719c454d269cb03b776d8a4b0ad66111 to before 24046d31f6f92220852d393d510b6062843e3fbd, 38428d68719c454d269cb03b776d8a4b0ad66111 to before f0e49fd13afe9dea7a09a1c9537fd00cea22badb, 38428d68719c454d269cb03b776d8a4b0ad66111 to before 8dd4aa0122885f710930de135af2adc4ccc3238f, 38428d68719c454d269cb03b776d8a4b0ad66111 to before 390b3a300d7872cef9588f003b204398be69ce08
Linux
Linux · 5.8
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: net/ipv4/nexthop.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-39985
Affected technology
Linux · 51f3baad7de943780ce0c17bd7975df567dd6e14 to before 0fa9303c4b9493727e0d3a6ac3729300e3013930, 51f3baad7de943780ce0c17bd7975df567dd6e14 to before 37aed407496bf6de8910e588edb04d2435fa7011, 51f3baad7de943780ce0c17bd7975df567dd6e14 to before 6eec67bfb25637f9b51e584cf59ddace59925bc8, 51f3baad7de943780ce0c17bd7975df567dd6e14 to before ca4e51359608e1f29bf1f2c33c3ddf775b6b7ed1, 51f3baad7de943780ce0c17bd7975df567dd6e14 to before 3664ae91b26d1fd7e4cee9cde17301361f4c89d5, 51f3baad7de943780ce0c17bd7975df567dd6e14 to before 6b9fb82df8868dbe9ffea5874b8d35f951faedbb, 51f3baad7de943780ce0c17bd7975df567dd6e14 to before b638c3fb0f163e69785ceddb3b434a9437878bec, 51f3baad7de943780ce0c17bd7975df567dd6e14 to before 17c8d794527f01def0d1c8b7dc2d7b8d34fed0e6
Linux
Linux · 4.12
Linux
Component: Not specified by the source
Function: of
File: drivers/net/can/usb/mcba_usb.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
The source says unfortunately, because the mcba_usb driver does not populate its net_device_ops->ndo_change_mtu(), it is possible for an attacker to configure an invalid MTU by doing, for example: $ ip link set can0 mtu 9999 After doing so, the attacker could open a PF_PACKET socket using the ETH_P_CANXL protocol: socket(PF_PACKET, SOCK_RAW, htons(ETH_P_CANXL)) to inject a malicious CAN XL frames. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high.
CVE-2025-39986
Affected technology
Linux · 0738eff14d817a02ab082c392c96a1613006f158 to before 063539db42203b29d5aa2adf0cae3d68c646a6b6, 0738eff14d817a02ab082c392c96a1613006f158 to before 4f382cc887adca8478b9d3e6b81aa6698a95fff4, 0738eff14d817a02ab082c392c96a1613006f158 to before 60463a1c138900494cb3adae41142a11cd8feb3c, 0738eff14d817a02ab082c392c96a1613006f158 to before a61ff7ac93270d20ca426c027d6d01c8ac8e904c, 0738eff14d817a02ab082c392c96a1613006f158 to before 2e423e1990f3972cbea779883fef52c2f2acb858, 0738eff14d817a02ab082c392c96a1613006f158 to before de77841652e57afbc46e9e1dbf51ee364fc008e1, 0738eff14d817a02ab082c392c96a1613006f158 to before 7f7b21026a6febdb749f6f6f950427245aa86cce, 0738eff14d817a02ab082c392c96a1613006f158 to before 61da0bd4102c459823fbe6b8b43b01fb6ace4a22
Linux
Linux · 4.4
Linux
Component: Not specified by the source
Function: of
File: drivers/net/can/sun4i_can.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
The source says unfortunately, because the sun4i_can driver does not populate its net_device_ops->ndo_change_mtu(), it is possible for an attacker to configure an invalid MTU by doing, for example: $ ip link set can0 mtu 9999 After doing so, the attacker could open a PF_PACKET socket using the ETH_P_CANXL protocol: socket(PF_PACKET, SOCK_RAW, htons(ETH_P_CANXL)) to inject a malicious CAN XL frames. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high.
CVE-2025-39987
Affected technology
Linux · 57e83fb9b7468c75cb65cde1d23043553c346c6d to before f2c247e9581024d8b3dd44cbe086bf2bebbef42c, 57e83fb9b7468c75cb65cde1d23043553c346c6d to before 8f351db6b2367991f0736b2cff082f5de4872113, 57e83fb9b7468c75cb65cde1d23043553c346c6d to before 7ab85762274c0fa997f0ef9a2307b2001aae43c4, 57e83fb9b7468c75cb65cde1d23043553c346c6d to before 57d332ce8c921d0e340650470bb0c1d707f216ee, 57e83fb9b7468c75cb65cde1d23043553c346c6d to before be1b25005fd0f9d4e78bec6695711ef87ee33398, 57e83fb9b7468c75cb65cde1d23043553c346c6d to before def814b4ba31b563584061d6895d5ff447d5bc14, 57e83fb9b7468c75cb65cde1d23043553c346c6d to before e77fdf9e33a83a08f04ab0cb68c19ddb365a622f, 57e83fb9b7468c75cb65cde1d23043553c346c6d to before ac1c7656fa717f29fac3ea073af63f0b9919ec9a
Linux
Linux · 4.12
Linux
Component: Not specified by the source
Function: of
File: drivers/net/can/spi/hi311x.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
The source says unfortunately, because the sun4i_can driver does not populate its net_device_ops->ndo_change_mtu(), it is possible for an attacker to configure an invalid MTU by doing, for example: $ ip link set can0 mtu 9999 After doing so, the attacker could open a PF_PACKET socket using the ETH_P_CANXL protocol: socket(PF_PACKET, SOCK_RAW, htons(ETH_P_CANXL)) to inject a malicious CAN XL frames. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high.
CVE-2025-39988
Affected technology
Linux · 8537257874e949a59c834cecfd5a063e11b64b0b to before 72de0facc50afdb101fb7197d880407f1abfc77f, 8537257874e949a59c834cecfd5a063e11b64b0b to before c4e582e686c4d683c87f2b4a316385b3d81d370f, 8537257874e949a59c834cecfd5a063e11b64b0b to before cbc1de71766f326a44bb798aeae4a7ef4a081cc9, 8537257874e949a59c834cecfd5a063e11b64b0b to before b26cccd87dcddc47b450a40f3b1ac3fe346efcff, 8537257874e949a59c834cecfd5a063e11b64b0b to before e587af2c89ecc6382c518febea52fa9ba81e47c0, 8537257874e949a59c834cecfd5a063e11b64b0b to before 38c0abad45b190a30d8284a37264d2127a6ec303
Linux
Linux · 5.13
Linux
Component: Not specified by the source
Function: of
File: drivers/net/can/usb/etas_es58x/es58x_core.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
The source says unfortunately, because the etas_es58x driver does not populate its net_device_ops->ndo_change_mtu(), it is possible for an attacker to configure an invalid MTU by doing, for example: $ ip link set can0 mtu 9999 After doing so, the attacker could open a PF_PACKET socket using the ETH_P_CANXL protocol: socket(PF_PACKET, SOCK_RAW, htons(ETH_P_CANXL)); to inject a malicious CAN XL frames. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high.
CVE-2025-39994
Affected technology
Linux · f7a27ff1fb77e114d1059a5eb2ed1cffdc508ce8 to before bc4ffd962ce16a154c44c68853b9d93f5b6fc4b8, f7a27ff1fb77e114d1059a5eb2ed1cffdc508ce8 to before e2f5eaafc0306a76fb1cb760aae804b065b8a341, f7a27ff1fb77e114d1059a5eb2ed1cffdc508ce8 to before 3f876cd47ed8bca1e28d68435845949f51f90703, f7a27ff1fb77e114d1059a5eb2ed1cffdc508ce8 to before df0303b4839520b84d9367c2fad65b13650a4d42, f7a27ff1fb77e114d1059a5eb2ed1cffdc508ce8 to before 71ed8b81a4906cb785966910f39cf7f5ad60a69e, f7a27ff1fb77e114d1059a5eb2ed1cffdc508ce8 to before effb1c19583bca7022fa641a70766de45c6d41ac, f7a27ff1fb77e114d1059a5eb2ed1cffdc508ce8 to before 9a00de20ed8ba90888479749b87bc1532cded4ce, f7a27ff1fb77e114d1059a5eb2ed1cffdc508ce8 to before 4266f012806fc18e46da4a04d130df59a4946f93, f7a27ff1fb77e114d1059a5eb2ed1cffdc508ce8 to before 40b7a19f321e65789612ebaca966472055dab48c
Linux
Linux · 3.16
Linux
Component: Not specified by the source
File: drivers/media/tuners/xc5000.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · User interaction required
What an attacker can do
A local attacker with low privileges could trigger a use-after-free error. Source advisory’s CVSS 3.1 assessment (base score 7.3/10) rates confidentiality, integrity and availability impact as high. The description does not state a further attacker outcome.
CVE-2025-39995
Affected technology
Linux · d32d98642de66048f9534a05f3641558e811bbc9 to before 9205fb6e617a1c596d9a9ad2a160ee696e09d520, d32d98642de66048f9534a05f3641558e811bbc9 to before 70913586c717dd25cfbade7a418e92cc9c99398a, d32d98642de66048f9534a05f3641558e811bbc9 to before 663faf1179db9663a3793c75e9bc869358bad910, d32d98642de66048f9534a05f3641558e811bbc9 to before 3d17701c156579969470e58b3a906511f8bc018d, d32d98642de66048f9534a05f3641558e811bbc9 to before 228d06c4cbfc750f1216a3fd91b4693b0766d2f6, d32d98642de66048f9534a05f3641558e811bbc9 to before f92181c0e13cad9671d07b15be695a97fc2534a3, d32d98642de66048f9534a05f3641558e811bbc9 to before f3f3f00bcabbd2ce0a77a2ac7a6797b8646bfd8b, d32d98642de66048f9534a05f3641558e811bbc9 to before 2610617effb4454d2f1c434c011ccb5cc7140711, d32d98642de66048f9534a05f3641558e811bbc9 to before 79d10f4f21a92e459b2276a77be62c59c1502c9d
Linux
Linux · 4.3
Linux
Component: Not specified by the source
File: drivers/media/i2c/tc358743.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-39996
Affected technology
Linux · 382c5546d618f24dc7d6ae7ca33412083720efbf to before 607010d07b8a509b01ed15ea12744acac6536a98, 382c5546d618f24dc7d6ae7ca33412083720efbf to before bde8173def374230226e8554efb51b271f4066ec, 382c5546d618f24dc7d6ae7ca33412083720efbf to before 120e221b4bbe9d0f6c09b5c4dc53ca4ad91d956b, 382c5546d618f24dc7d6ae7ca33412083720efbf to before d502df8a716d993fa0f9d8c00684f1190750e28e, 382c5546d618f24dc7d6ae7ca33412083720efbf to before bb10a9ddc8d6c5dbf098f21eb1055a652652e524, 382c5546d618f24dc7d6ae7ca33412083720efbf to before 514a519baa9e2be7ddc2714bd730bc5a883e1244, 382c5546d618f24dc7d6ae7ca33412083720efbf to before 3ffabc79388e68877d9c02f724a0b7a38d519daf, 382c5546d618f24dc7d6ae7ca33412083720efbf to before 6a92f5796880f5aa345f0fed53ef511e3fd6f706, 382c5546d618f24dc7d6ae7ca33412083720efbf to before 01e03fb7db419d39e18d6090d4873c1bff103914
Linux
Linux · 2.6.29
Linux
Component: Not specified by the source
Function: to
File: drivers/media/pci/b2c2/flexcop-pci.c
What an attacker can do
A attacker could trigger a use-after-free error. The description does not state a further attacker outcome.
CVE-2025-39998
Affected technology
Linux · c66ac9db8d4ad9994a02b3e933ea2ccc643e1fe5 to before e6eeee5dc0d9221ff96d1b229b1d0222c8871b84, c66ac9db8d4ad9994a02b3e933ea2ccc643e1fe5 to before 764a91e2fc9639e07aac93bc70e387e6b1e33084, c66ac9db8d4ad9994a02b3e933ea2ccc643e1fe5 to before ddc79fba132b807ff775467acceaf48b456e008b, c66ac9db8d4ad9994a02b3e933ea2ccc643e1fe5 to before e73fe0eefac3e15bf88fb5b4afae4c76215ee4d4, c66ac9db8d4ad9994a02b3e933ea2ccc643e1fe5 to before f03aa5e39da7d045615b3951d2a6ca1d7132f881, c66ac9db8d4ad9994a02b3e933ea2ccc643e1fe5 to before 53c6351597e6a17ec6619f6f060d54128cb9a187, c66ac9db8d4ad9994a02b3e933ea2ccc643e1fe5 to before 4b292286949588bd2818e66ff102db278de8dd26, c66ac9db8d4ad9994a02b3e933ea2ccc643e1fe5 to before a150275831b765b0f1de8b8ff52ec5c6933ac15d, c66ac9db8d4ad9994a02b3e933ea2ccc643e1fe5 to before 27e06650a5eafe832a90fd2604f0c5e920857fae
Linux
Linux · 2.6.38
Linux
Component: Not specified by the source
Function: located, memcpy
File: drivers/target/target_core_configfs.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40001
Affected technology
Linux · 20b09c2992fefbe78f8cede7b404fb143a413c52 to before a6f68f219d4d4b92d7c781708d4afc4cc42961ec, 20b09c2992fefbe78f8cede7b404fb143a413c52 to before aacd1777d4a795c387a20b9ca776e2c1225d05d7, 20b09c2992fefbe78f8cede7b404fb143a413c52 to before 6ba7e73cafd155a5d3abf560d315f0bab2b9d89f, 20b09c2992fefbe78f8cede7b404fb143a413c52 to before c2c35cb2a31844f84f21ab364b38b4309d756d42, 20b09c2992fefbe78f8cede7b404fb143a413c52 to before 3c90f583d679c81a5a607a6ae0051251b6dee35b, 20b09c2992fefbe78f8cede7b404fb143a413c52 to before 00d3af40b158ebf7c7db2b3bbb1598a54bf28127, 20b09c2992fefbe78f8cede7b404fb143a413c52 to before feb946d2fc9dc754bf3d594d42cd228860ff8647, 20b09c2992fefbe78f8cede7b404fb143a413c52 to before 60cd16a3b7439ccb699d0bf533799eeb894fd217
Linux
Linux · 2.6.31
Linux
Component: Not specified by the source
File: drivers/scsi/mvsas/mv_init.c
What an attacker can do
A attacker could trigger a use-after-free error. The description does not state a further attacker outcome.
CVE-2025-40006
Affected technology
Linux · 4aae8d1c051ea00b456da6811bc36d1f69de5445 to before bc1c9ce8aeff45318332035dbef9713fb9e982d7, 4aae8d1c051ea00b456da6811bc36d1f69de5445 to before 91f548e920fbf8be3f285bfa3fa045ae017e836d, 4aae8d1c051ea00b456da6811bc36d1f69de5445 to before 3e851448078f5b01f6264915df3cfef75e323a12, 4aae8d1c051ea00b456da6811bc36d1f69de5445 to before c1dc0524ab2cc3982d4e0d2bfac71a0cd4d65c39, 4aae8d1c051ea00b456da6811bc36d1f69de5445 to before c9c2a51f91aea70e89b496cac360cd795a2b3c26, 4aae8d1c051ea00b456da6811bc36d1f69de5445 to before 910d7749346c4b0acdc6e4adfdc4a9984281a206, 4aae8d1c051ea00b456da6811bc36d1f69de5445 to before 21ee79ce938127f88fe07e409c1817f477dbe7ea, 4aae8d1c051ea00b456da6811bc36d1f69de5445 to before 7b7387650dcf2881fd8bb55bcf3c8bd6c9542dd7
Linux
Linux · 4.5
Linux
Component: Not specified by the source
File: fs/hugetlbfs/inode.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40011
Affected technology
Linux · 1b082ccf5901108d3acd860a73d8c0442556c0bb to before 70b0c11483d3b90b2d0f416026e475e084a77e62, 1b082ccf5901108d3acd860a73d8c0442556c0bb to before 4bbfd1b290857b9d14ea9d91562bde55ff2bc85e, 1b082ccf5901108d3acd860a73d8c0442556c0bb to before e15de80737d444ed743b1c60ced4a3a97913169b, 1b082ccf5901108d3acd860a73d8c0442556c0bb to before 02e4ff4941efb9bbb40d8d5b61efa1a4119b1ba7, 1b082ccf5901108d3acd860a73d8c0442556c0bb to before 6ffa6b5bc861a3ea9dfcdc007f002b4a347c24ba, 1b082ccf5901108d3acd860a73d8c0442556c0bb to before f800f7054d2cf28b51296c7c575da27c29e3859b, 1b082ccf5901108d3acd860a73d8c0442556c0bb to before 0fc650fa475b50c1da8236c5e900b9460c7027bc, 1b082ccf5901108d3acd860a73d8c0442556c0bb to before 352e66900cde63f3dadb142364d3c35170bbaaff
Linux
Linux · 3.3
Linux
Component: Not specified by the source
File: drivers/gpu/drm/gma500/oaktrail_hdmi.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-40020
Affected technology
Linux · bb4785551f64e18b2c8bb15a3bd2b22f5ebf624d to before 572c656802781cc57f4a3231eefa83547e75ed78, bb4785551f64e18b2c8bb15a3bd2b22f5ebf624d to before 61b1dd4c614935169d12bdecc26906e37b508618, bb4785551f64e18b2c8bb15a3bd2b22f5ebf624d to before 48822a59ecc47d353400d38b1941d3ae7591ffff, bb4785551f64e18b2c8bb15a3bd2b22f5ebf624d to before 176c81cbf9c4e348610a421aad800087c0401f60, bb4785551f64e18b2c8bb15a3bd2b22f5ebf624d to before 17edec1830e48c0becd61642d0e40bc753243b16, bb4785551f64e18b2c8bb15a3bd2b22f5ebf624d to before eb79ed970670344380e77d62f8188e8015648d94, bb4785551f64e18b2c8bb15a3bd2b22f5ebf624d to before 394c58017e5f41043584c345106cae16a4613710, bb4785551f64e18b2c8bb15a3bd2b22f5ebf624d to before c443be70aaee42c2d1d251e0329e0a69dd96ae54
Linux
Linux · 3.4
Linux
Component: Not specified by the source
File: drivers/net/can/usb/peak_usb/pcan_usb_core.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-40021
Affected technology
Linux · 17911ff38aa58d3c95c07589dbf5d3564c4cf3c5 to before f3ac1f4eaba58e57943efa3e8b8d71fa7aab0abf, 17911ff38aa58d3c95c07589dbf5d3564c4cf3c5 to before 0d41604d2d53c1abe27fefb54b37a8f6642a4d74, 17911ff38aa58d3c95c07589dbf5d3564c4cf3c5 to before 07b1f63b5f86765793fab44d3d4c2be681cddafb, 17911ff38aa58d3c95c07589dbf5d3564c4cf3c5 to before 3887f3814c0e770e6b73567fe0f83a2c01a6470c, 17911ff38aa58d3c95c07589dbf5d3564c4cf3c5 to before 573b1e39edfcb7b4eecde0f1664455a1f4462eee, 17911ff38aa58d3c95c07589dbf5d3564c4cf3c5 to before b47c4e06687a5a7b6c6ef4bd303fcfe4430b26bb, 17911ff38aa58d3c95c07589dbf5d3564c4cf3c5 to before 456c32e3c4316654f95f9d49c12cbecfb77d5660
Linux
Linux · 5.4
Linux
Component: Not specified by the source
File: kernel/trace/trace_dynevent.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-40026
Affected technology
Linux · 8a76d7f25f8f24fc5a328c8e15e4a7313cf141b9 to before a908eca437789589dd4624da428614c1275064dc, 8a76d7f25f8f24fc5a328c8e15e4a7313cf141b9 to before 00338255bb1f422642fb2798ebe92e93b6e4209b, 8a76d7f25f8f24fc5a328c8e15e4a7313cf141b9 to before e0ce3ed1048a47986d15aef1a98ebda25560d257, 8a76d7f25f8f24fc5a328c8e15e4a7313cf141b9 to before ba35a5d775799ce5ad60230be97336f2fefd518e, 8a76d7f25f8f24fc5a328c8e15e4a7313cf141b9 to before 3d3abf3f7e8b1abb082070a343de82d7efc80523, 8a76d7f25f8f24fc5a328c8e15e4a7313cf141b9 to before e7177c7e32cb806f348387b7f4faafd4a5b32054, 8a76d7f25f8f24fc5a328c8e15e4a7313cf141b9 to before 3a062a5c55adc5507600b9ae6d911e247e2f1d6e, 8a76d7f25f8f24fc5a328c8e15e4a7313cf141b9 to before 7366830642505683bbe905a2ba5d18d6e4b512b8, 8a76d7f25f8f24fc5a328c8e15e4a7313cf141b9 to before e750f85391286a4c8100275516973324b621a269
Linux
Linux · 3.0
Linux
Component: Not specified by the source
File: arch/x86/kvm/emulate.c, arch/x86/kvm/kvm_emulate.h, arch/x86/kvm/x86.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.9/10) rates confidentiality and integrity impact as low; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40027
Affected technology
Linux · afd8d65411551839b7ab14a539d00075b2793451 to before a5901a0dfb5964525990106706ae8b98db098226, afd8d65411551839b7ab14a539d00075b2793451 to before 5c64c0b7b3446f7ed088a13bc8d7487d66534cbb, afd8d65411551839b7ab14a539d00075b2793451 to before c1db864270eb7fea94a9ef201da0c9dc1cbab7b8, afd8d65411551839b7ab14a539d00075b2793451 to before 0e0097005abc02c9f262370674f855625f4f3fb4, afd8d65411551839b7ab14a539d00075b2793451 to before 284e67a93b8c48952b6fc82129a8d3eb9dc73b06, afd8d65411551839b7ab14a539d00075b2793451 to before 716dceb19a9f8ff6c9d3aee5a771a93d6a47a0b6, afd8d65411551839b7ab14a539d00075b2793451 to before 448db01a48e1cdbbc31c995716a5dac1e52ba036, afd8d65411551839b7ab14a539d00075b2793451 to before 94797b84cb9985022eb9cb3275c9497fbc883bb6, afd8d65411551839b7ab14a539d00075b2793451 to before 674b56aa57f9379854cb6798c3bbcef7e7b51ab7
Linux
Linux · 3.15
Linux
Component: Not specified by the source
File: net/9p/trans_fd.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40029
Affected technology
Linux · 6305166c8771c33a8d5992fb53f93cfecedc14fd to before 58dd05070b57a20f22ff35a34ef9846bdf49a1d0, 6305166c8771c33a8d5992fb53f93cfecedc14fd to before 8a4dd74fe413d4a278e649be1d22d028e1667116, 6305166c8771c33a8d5992fb53f93cfecedc14fd to before e60d55692e6c8e951000343c39f3fc92cab57efc, 6305166c8771c33a8d5992fb53f93cfecedc14fd to before 78e87b8a3cf8a59671ea25c87192d16e8d710e1c, 6305166c8771c33a8d5992fb53f93cfecedc14fd to before 84ec0482ed9c9ed0aee553a5e7e7458ad79c021f, 6305166c8771c33a8d5992fb53f93cfecedc14fd to before 2ead548473f58c7960b6b939b79503c4a0a2c0bd, 6305166c8771c33a8d5992fb53f93cfecedc14fd to before 25f526507b8ccc6ac3a43bc094d09b1f9b0b90ae
Linux
Linux · 5.9
Linux
Component: Not specified by the source
File: drivers/bus/fsl-mc/fsl-mc-bus.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-40030
Affected technology
Linux · f913cfce4ee49a3382a9ff95696f49a46e56e974 to before 1a7fc8fed2bb2e113604fde7a45432ace2056b97, f913cfce4ee49a3382a9ff95696f49a46e56e974 to before e7265dc4c670b89611bcf5fe33acf99bc0aa294f, f913cfce4ee49a3382a9ff95696f49a46e56e974 to before d77ef2f621cd1d605372c4c6ce667c496f6990c3, f913cfce4ee49a3382a9ff95696f49a46e56e974 to before ba7f7c2b2b3261e7def67018c38c69b626e0e66e, f913cfce4ee49a3382a9ff95696f49a46e56e974 to before 1a2ea887a5cd7d47bab599f733d89444df018b1a, f913cfce4ee49a3382a9ff95696f49a46e56e974 to before 688c688e0bf55824f4a38f8c2180046f089a3e3b, f913cfce4ee49a3382a9ff95696f49a46e56e974 to before b7e0535060a60cc99eafc19cc665d979714cd73a, f913cfce4ee49a3382a9ff95696f49a46e56e974 to before 4002ee98c022d671ecc1e4a84029e9ae7d8a5603
Linux
Linux · 4.19
Linux
Component: Not specified by the source
File: drivers/pinctrl/pinmux.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-40035
Affected technology
Linux · 2d56f3a32c0e62f99c043d2579840f9731fe5855 to before 1b317796013f666ae5040edbf0f230ec61496d42, 2d56f3a32c0e62f99c043d2579840f9731fe5855 to before 877172b97786ed1678640dff0b2d35abb328844c, 2d56f3a32c0e62f99c043d2579840f9731fe5855 to before e63aade22a33e77b93c98c9f02db504d897a76b4, 2d56f3a32c0e62f99c043d2579840f9731fe5855 to before 933b87c4590b42500299f00ff55f555903056803, 2d56f3a32c0e62f99c043d2579840f9731fe5855 to before fd8a23ecbc602d00e47b27f20b07350867d0ebe5, 2d56f3a32c0e62f99c043d2579840f9731fe5855 to before 48c96b7e9e03516936d6deba54b5553097eae817, 2d56f3a32c0e62f99c043d2579840f9731fe5855 to before f5e1f3b85aadce74268c46676772c3e9fa79897e, 2d56f3a32c0e62f99c043d2579840f9731fe5855 to before d3366a04770eea807f2826cbdb96934dd8c9bf79
Linux
Linux · 2.6.29
Linux
Component: Not specified by the source
File: drivers/input/misc/uinput.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-40040
Affected technology
linux kernel · from 4.6 (inclusive), before 5.4.302 (exclusive)
linux
linux kernel · from 5.5 (inclusive), before 5.10.247 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.197 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.158 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.114 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.55 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.17.3 (exclusive)
linux
Linux · 63c17fb8e5a46a16e10e82005748837fd11a2024 to before 850f1ea245bdc0ce6a3fd36bfb80d8cf9647cb71, 63c17fb8e5a46a16e10e82005748837fd11a2024 to before 788e5385d0ff69cdba1cabccb9dab8d9647b9239, 63c17fb8e5a46a16e10e82005748837fd11a2024 to before b69f19244c2b6475c8a6eb72f0fb0d53509e48cd, 63c17fb8e5a46a16e10e82005748837fd11a2024 to before 41cb9fd904fe0c39d52e82dd84dc3c96b7aa9693, 63c17fb8e5a46a16e10e82005748837fd11a2024 to before 92b82e232b8d8b116ac6e57aeae7a6033db92c60, 63c17fb8e5a46a16e10e82005748837fd11a2024 to before ac50c6e0a8f91a02b681af81abb2362fbb67cc18, 63c17fb8e5a46a16e10e82005748837fd11a2024 to before 76385629f45740b7888f8fcd83bde955b10f61fe, 63c17fb8e5a46a16e10e82005748837fd11a2024 to before f04aad36a07cc17b7a5d5b9a2d386ce6fae63e93
Linux
Linux · 4.6
Linux
Component: Not specified by the source
File: include/linux/mm.h, rust/bindings/bindings_helper.h
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40042
Affected technology
Linux · 50d780560785b068c358675c5f0bf6c83b5c373e to before 07926ce598a95de6fd874a74fb510e2ebdfd0aae, 50d780560785b068c358675c5f0bf6c83b5c373e to before 9c4951b691bb8d7a004acd010f45144391f85ea6, 50d780560785b068c358675c5f0bf6c83b5c373e to before 95dd33361061f808d1f68616d69ada639e737cfa, 50d780560785b068c358675c5f0bf6c83b5c373e to before a6e89ada1ff6b70df73f579071ffa6ade8ae7f98, 50d780560785b068c358675c5f0bf6c83b5c373e to before 1a301228c0a8aedc3154fb1a274456f487416b96, 50d780560785b068c358675c5f0bf6c83b5c373e to before 0fa388ab2c290ef1115ff88ae88e881d0fb2db02, 50d780560785b068c358675c5f0bf6c83b5c373e to before 5ebea6561649d30ec7a18fea23d7f76738dae916, 50d780560785b068c358675c5f0bf6c83b5c373e to before 9cf9aa7b0acfde7545c1a1d912576e9bab28dc6f
Linux
Linux · 2.6.33
Linux
Component: Not specified by the source
File: kernel/trace/trace_fprobe.c, kernel/trace/trace_kprobe.c, kernel/trace/trace_probe.h, kernel/trace/trace_uprobe.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-40043
Affected technology
Linux · 6a2968aaf50c7a22fced77a5e24aa636281efca8 to before 8fcc7315a10a84264e55bb65ede10f0af20a983f, 6a2968aaf50c7a22fced77a5e24aa636281efca8 to before bfdda0123dde406dbff62e7e9136037e97998a15, 6a2968aaf50c7a22fced77a5e24aa636281efca8 to before 0ba68bea1e356f466ad29449938bea12f5f3711f, 6a2968aaf50c7a22fced77a5e24aa636281efca8 to before 74837bca0748763a77f77db47a0bdbe63b347628, 6a2968aaf50c7a22fced77a5e24aa636281efca8 to before c395d1e548cc68e84584ffa2e3ca9796a78bf7b9, 6a2968aaf50c7a22fced77a5e24aa636281efca8 to before 9c328f54741bd5465ca1dc717c84c04242fac2e1
Linux
Linux · 3.2
Linux
Component: Not specified by the source
File: net/nfc/nci/ntf.c
Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40044
Affected technology
Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 14496175b264d30c2045584ee31d062af2e3a660, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d2ed9aa8ae50fb0d4ac5ab07e4c67ba7e9a24818, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1d1847812a1a5375c10a2a779338df643f79c047, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 918649364fbca7d5df72522ca795479edcd25f91, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a70dcfa8d0a0cc530a6af59483dfca260b652c1b, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b57f2d7d3e6bb89ed82330c5fe106cdfa34d3e24, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 459404f858213967ccfff336c41747d8dd186d38, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 3bd5e45c2ce30e239d596becd5db720f7eb83c99
Linux
Linux · 2.6.12
Linux
Component: Not specified by the source
File: fs/udf/inode.c
Attack conditions (Source advisory, CVSS 3.1): Local · No privileges required · User interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40048
Affected technology
Linux · 95096f2fbd10186d3e78a328b327afc71428f65f to before 540aac117eaea5723cef5e4cbf3035c4ac654d92, 95096f2fbd10186d3e78a328b327afc71428f65f to before 65d40acd911c7011745cbbd2aaac34eb5266d11e, 95096f2fbd10186d3e78a328b327afc71428f65f to before a44f61f878f32071d6378e8dd7c2d47f9490c8f7, 95096f2fbd10186d3e78a328b327afc71428f65f to before 01ce972e6f9974a7c76943bcb7e93746917db83a, 95096f2fbd10186d3e78a328b327afc71428f65f to before 2af39ab5e6dc46b835a52e80a22d0cad430985e3, 95096f2fbd10186d3e78a328b327afc71428f65f to before 37bd91f22794dc05436130d6983302cb90ecfe7e, 95096f2fbd10186d3e78a328b327afc71428f65f to before e29587c07537929684faa365027f4b0d87521e1b, 95096f2fbd10186d3e78a328b327afc71428f65f to before b15b7d2a1b09ef5428a8db260251897405a19496
Linux
Linux · 4.10
Linux
Component: Not specified by the source
File: drivers/uio/uio_hv_generic.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40049
Affected technology
Linux · 122601408d20c77704268f1dea9f9ce4abf997c2 to before f81a5bc9e924ee1950e0dd82bd10749048390f6e, 122601408d20c77704268f1dea9f9ce4abf997c2 to before 382a47fae449e554ef1e8c198667fd2f3270b945, 122601408d20c77704268f1dea9f9ce4abf997c2 to before 61d38b5ce2782bff3cacaacbb8164087a73ed1a5, 122601408d20c77704268f1dea9f9ce4abf997c2 to before 81a2bca52d43fc9d9abf07408b91255131c5dc53, 122601408d20c77704268f1dea9f9ce4abf997c2 to before c28b0ca029edf5d0558abcd76cb8c732706cd339, 122601408d20c77704268f1dea9f9ce4abf997c2 to before 1b3ccd0019132880c94bb00ca7088c1749308f82, 122601408d20c77704268f1dea9f9ce4abf997c2 to before 91b99db7a92e57ff48a96a1b10fddfd2547e7f53, 122601408d20c77704268f1dea9f9ce4abf997c2 to before 74058c0a9fc8b2b4d5f4a0ef7ee2cfa66a9e49cf
Linux
Linux · 2.6.29
Linux
Component: Not specified by the source
File: fs/squashfs/inode.c, fs/squashfs/squashfs_fs_i.h
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-40053
Affected technology
Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 84fd710a704f3d53d4120e452e86cea558cf73a8, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 5aa9b885602811a026a3f45c92ea2b4b04c54f09, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 9d49e4b14609e1a20d931e718962c4b6b5485174, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ea87151df398d407a632c7bf63013290f01c5009, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7ed5010fef0930f4322d620052edc854ef3ec41f, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before fd7b6b2c920d7fd370a612be416a904d6e1ebe55, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8169a6011c5fecc6cb1c3654c541c567d3318de8
Linux
Linux · 2.6.12
Linux
Component: Not specified by the source
File: drivers/net/ethernet/dlink/dl2k.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40055
Affected technology
Linux · c994c2ebdbbc391a42f177c8eb7882ebf3f142d8 to before 283333079d96c84baa91f0c62b5e0cbec246b7a2, c994c2ebdbbc391a42f177c8eb7882ebf3f142d8 to before f992bc72f681c32a682d474a29c2135a64d4f4e5, c994c2ebdbbc391a42f177c8eb7882ebf3f142d8 to before 827c8efa0d1afe817b90f3618afff552e88348d2, c994c2ebdbbc391a42f177c8eb7882ebf3f142d8 to before bfe011297ddd2d0cd64752978baaa0c04cd20573, c994c2ebdbbc391a42f177c8eb7882ebf3f142d8 to before 7e76fe9dfadbc00364d7523d5a109e9d3e4a7db2, c994c2ebdbbc391a42f177c8eb7882ebf3f142d8 to before 694d5b401036a614f8080085a9de6f86ff0742dc, c994c2ebdbbc391a42f177c8eb7882ebf3f142d8 to before 892f41e12c8689130d552a9eb2b77bafd26484ab, c994c2ebdbbc391a42f177c8eb7882ebf3f142d8 to before 8f45f089337d924db24397f55697cda0e6960516
Linux
Linux · 3.14
Linux
Component: Not specified by the source
File: fs/ocfs2/stack_user.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-40060
Affected technology
Linux · 3fbf7f011f2426dac8c982f1d2ef469a7959a524 to before cef047e0a55cb07906fcaae99170f19a9c0bb6c2, 3fbf7f011f2426dac8c982f1d2ef469a7959a524 to before fe53a726d5edf864e80b490780cc135fc1adece9, 3fbf7f011f2426dac8c982f1d2ef469a7959a524 to before 9768536f82600a05ce901e31ccfabd92c027ff71, 3fbf7f011f2426dac8c982f1d2ef469a7959a524 to before 296da78494633e1ab5e2e74173a9c8683b04aa6b, 3fbf7f011f2426dac8c982f1d2ef469a7959a524 to before f505a165f1c7cd37b4cb6952042a5984693a4067, 3fbf7f011f2426dac8c982f1d2ef469a7959a524 to before 8a55c161f7f9c1aa1c70611b39830d51c83ef36d
Linux
Linux · 5.13
Linux
Component: Not specified by the source
File: drivers/hwtracing/coresight/coresight-trbe.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-40068
Affected technology
Linux · 4342306f0f0d5ff4315a204d315c1b51b914fca5 to before f6b36cfd25cbadad63447c673743cf771090e756, 4342306f0f0d5ff4315a204d315c1b51b914fca5 to before 3ac37e100385b59ac821a62118494442238aaac4, 4342306f0f0d5ff4315a204d315c1b51b914fca5 to before a86c8b9d03f7101e1750233846fe989df6f0d631, 4342306f0f0d5ff4315a204d315c1b51b914fca5 to before 9378cfe228c2c679564a4116bcb28c8e89dff989, 4342306f0f0d5ff4315a204d315c1b51b914fca5 to before 5aa5799d162ad1b8e8b699d48b6218143c695a78, 4342306f0f0d5ff4315a204d315c1b51b914fca5 to before 736fc7bf5f68f6b74a0925b7e072c571838657d2
Linux
Linux · 5.15
Linux
Component: Not specified by the source
Function: decodes, logic
File: fs/ntfs3/run.c
Attack conditions (Source advisory, CVSS 3.1): Local · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 8.4/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40070
Affected technology
Linux · 785c78ed0d39d1717cca3ef931d3e51337b5e90e to before 38c7bb10aae5118dd48fa7a82f7bf93839bcc320, 1a7735ab2cb9747518a7416fb5929e85442dec62 to before 2a194707ca27a3b0523023fa8b446e5ec922dc51, c4041b6b0a7a3def8cf3f3d6120ff337bc4c40f7 to before 125527db41805693208ee1aacd7f3ffe6a3a489c, 91932db1d96b2952299ce30c1c693d834d10ace6 to before 4cbd7450a22c5ee4842fc4175ad06c0c82ea53a8, cd3bbcb6b3a7caa5ce67de76723b6d8531fb7f64 to before cf71834a0cfc394c72d62fd6dbb470ee13cf8f5e, 7e5ee3281dc09014367f5112b6d566ba36ea2d49 to before f01fa3588e0b3cb1540f56d2c6bd99e5b3810234, c79a39dc8d060b9e64e8b0fa9d245d44befeefbe to before 0f97564a1fb62f34b3b498e2f12caffbe99c004a, c79a39dc8d060b9e64e8b0fa9d245d44befeefbe to before b0531cdba5029f897da5156815e3bdafe1e9b88d, 85241f7de216f8298f6e48540ea13d7dcd100870, 5.4.291 to before 5.4.301, 5.10.235 to before 5.10.246, 5.15.179 to before 5.15.195, 6.1.129 to before 6.1.156, 6.6.76 to before 6.6.112, 6.12.13 to before 6.12.53, 6.13.2 to before 6.14
Linux
Linux · 6.14
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: drivers/pps/kapi.c, drivers/pps/pps.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-40078
Affected technology
Linux · 1cedee13d25ab118d325f95588c1a084e9317229 to before de44cdc50d2dce8718cb57deddf9cf1be9a7759f, 1cedee13d25ab118d325f95588c1a084e9317229 to before 76e04bbb4296fb6eac084dbfc27e02ccc744db3e, 1cedee13d25ab118d325f95588c1a084e9317229 to before 6d8b1a21fd5c34622b0c3893c61e4a38d8ba53ec, 1cedee13d25ab118d325f95588c1a084e9317229 to before 4f00858cd9bbbdf67159e28b85a8ca9e77c83622, 1cedee13d25ab118d325f95588c1a084e9317229 to before cdeafacb4f9ff261a96baef519e29480fd7b1019, 1cedee13d25ab118d325f95588c1a084e9317229 to before fe9d33f0470350558cb08cecb54cf2267b3a45d2, 1cedee13d25ab118d325f95588c1a084e9317229 to before ad8b4fe5617e3c85fc23267f02500c4f3bf0ff69, 1cedee13d25ab118d325f95588c1a084e9317229 to before 6fabca2fc94d33cdf7ec102058983b086293395f
Linux
Linux · 4.18
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: net/core/filter.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-40081
Affected technology
Linux · d5d9696b03808bc6be723cc85288c912c3a05606 to before 656e9a5d69acdd1b20462f4a33378b90ddcb9626, d5d9696b03808bc6be723cc85288c912c3a05606 to before 9c045d4501f7f70724a3bbb561f4f22d292bbfe6, d5d9696b03808bc6be723cc85288c912c3a05606 to before 5d01f2b81568289443d22f1e13a363f829de6343, d5d9696b03808bc6be723cc85288c912c3a05606 to before 7500384d3c9587593d75ded3b006835e7aa73ef8, d5d9696b03808bc6be723cc85288c912c3a05606 to before 379cae2cb982f571cda9493ac573ab71125fd299, d5d9696b03808bc6be723cc85288c912c3a05606 to before 1a19ba8e1f4ff24ece8ca69b79df8442c431db90, d5d9696b03808bc6be723cc85288c912c3a05606 to before e516cfd19b0f4c774a57b17fb43a7f41991f0735, d5d9696b03808bc6be723cc85288c912c3a05606 to before a29fea30dd93da16652930162b177941abd8c75e
Linux
Linux · 4.15
Linux
Component: Not specified by the source
File: drivers/perf/arm_spe_pmu.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40083
Affected technology
Linux · 462dbc9101acd38e92eda93c0726857517a24bbd to before 71d84658a61322e5630c85c5388fc25e4a2d08b2, 462dbc9101acd38e92eda93c0726857517a24bbd to before 99fc137f178797204d36ac860dd8b31e35baa2df, 462dbc9101acd38e92eda93c0726857517a24bbd to before 1bed56f089f09b465420bf23bb32985c305cfc28, 462dbc9101acd38e92eda93c0726857517a24bbd to before 3c2a8994807623c7655ece205667ae2cf74940aa, 462dbc9101acd38e92eda93c0726857517a24bbd to before 6ffa9d66187188e3068b5a3895e6ae1ee34f9199, 462dbc9101acd38e92eda93c0726857517a24bbd to before 6ff8e74c8f8a68ec07ef837b95425dfe900d060f, 462dbc9101acd38e92eda93c0726857517a24bbd to before dd831ac8221e691e9e918585b1003c7071df0379
Linux
Linux · 3.8
Linux
Component: Not specified by the source
File: include/net/pkt_sched.h, net/sched/sch_api.c, net/sched/sch_hfsc.c, net/sched/sch_qfq.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-40085
Affected technology
Linux · 28787ff9fbeaf57684eb64cc33e2ec8ceedf21b5 to before 736159f7b296d7a95f7208eb4799639b1f8b16a0, 39efc9c8a973ddff5918191525d1679d0fb368ea to before 8d19a7ab28c7b9c207db5c5282afa8cc8595bcdb, 39efc9c8a973ddff5918191525d1679d0fb368ea to before 576312eb436326b44b7010f4d9ae2b698df075ea, 39efc9c8a973ddff5918191525d1679d0fb368ea to before bba7208765d26e5e36b87f21dacc2780b064f41f, 39efc9c8a973ddff5918191525d1679d0fb368ea to before 8503ac1a62075a085402e42a386b5c627c821a51, 39efc9c8a973ddff5918191525d1679d0fb368ea to before 28412b489b088fb88dff488305fd4e56bd47f6e4, 9d4f4dc3cd38e412c29a7626489fe48b79ebbf6c, 52076a41c128146c9df4a157e972cb17019313b1, 5.15.75 to before 5.15.196, 5.19.17 to before 5.20, 6.0.3 to before 6.1
Linux
Linux · 6.1
Linux
Component: Not specified by the source
File: sound/usb/card.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-40087
Affected technology
Linux · 9b9960a0ca4773e21c4b153ed355583946346b25 to before a75994dd879401c3e24ff51c2536559f1a53ea27, 9b9960a0ca4773e21c4b153ed355583946346b25 to before 34d187e020cbda112a6c6f094f0ca5e6a8672b75, 9b9960a0ca4773e21c4b153ed355583946346b25 to before ba88a53d7f5df4191583abf214214efe0cda91d2, 9b9960a0ca4773e21c4b153ed355583946346b25 to before da9129ef77786839a3ccd1d7afeeab790bceaa1d, 9b9960a0ca4773e21c4b153ed355583946346b25 to before f7353208c91ab004e0179c5fb6c365b0f132f9f0, 9b9960a0ca4773e21c4b153ed355583946346b25 to before a156af6a4dc38c2aa7c98e89520a70fb3b3e7df4, 9b9960a0ca4773e21c4b153ed355583946346b25 to before 785ec512afa80d0540f2ca797c0e56de747a6083, 9b9960a0ca4773e21c4b153ed355583946346b25 to before 4b47a8601b71ad98833b447d465592d847b4dc77
Linux
Linux · 4.8
Linux
Component: Not specified by the source
File: fs/nfsd/flexfilelayout.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40088
Affected technology
Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 603158d4efa98a13a746bd586c20f194f4a31ec8, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ef250c3edd995d7bb5a5e5122ffad1c28a8686eb, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7ab44236b32ed41eb0636797e8e8e885a2f3b18a, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b47a75b6f762321f9eb6f31aab7bce47a37063b7, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 4f5ab4a9c6abd8b0d713cc2b7b041bc10d70f241, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 586c75dfd1d265c4150f6529debb85c9d62e101f, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 4bc081ba6c52b0c88c92701e3fbc33c7e2277afb, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 42520df65bf67189541a425f7d36b0b3e7bd7844
Linux
Linux · 2.6.12
Linux
Component: Not specified by the source
File: fs/hfsplus/unicode.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40092
Affected technology
Linux · 9f6ce4240a2bf456402c15c06768059e5973f28c to before 185193a4714aa9c78437a7a1858fbe5771f0f45c, 9f6ce4240a2bf456402c15c06768059e5973f28c to before f37de8dec6a4c379b4b8486003a1de00ff8cff3b, 9f6ce4240a2bf456402c15c06768059e5973f28c to before 1cde4516295a030cb8ab4c93114ca3b6c3c6a1e2, 9f6ce4240a2bf456402c15c06768059e5973f28c to before d3fe7143928d8dfa2ec7bac9f906b48bc75b98ee, 9f6ce4240a2bf456402c15c06768059e5973f28c to before ed78f4d6079d872432b1ed54f155ef61965d3137, 9f6ce4240a2bf456402c15c06768059e5973f28c to before 75a5b8d4ddd4eb6b16cb0b475d14ff4ae64295ef
Linux
Linux · 2.6.38
Linux
Component: Not specified by the source
File: drivers/usb/gadget/function/f_ncm.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40094
Affected technology
Linux · 1f1ba11b64947051fc32aa15fcccef6463b433f7 to before c5d116862dd3ed162d079738a5ebddf9fceea850, 1f1ba11b64947051fc32aa15fcccef6463b433f7 to before 2b1546f7c5fc6c44555a8e7a2b34229d1dcd2175, 1f1ba11b64947051fc32aa15fcccef6463b433f7 to before e348d18fb0124b662cfefb3001733b49da428215, 1f1ba11b64947051fc32aa15fcccef6463b433f7 to before 201a66d8e6630762e760e1d78f1d149da1691e7b, 1f1ba11b64947051fc32aa15fcccef6463b433f7 to before c4301e4dd6b32faccb744f1c2320e64235b68d3b, 1f1ba11b64947051fc32aa15fcccef6463b433f7 to before 47b2116e54b4a854600341487e8b55249e926324
Linux
Linux · 2.6.27
Linux
Component: Not specified by the source
File: drivers/usb/gadget/function/f_acm.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40105
Affected technology
Linux · f1ee616214cb22410e939d963bbb2349c2570f02 to before b5abafd0aa8d7bcb935c8f91e4cfc2f2820759e4, f1ee616214cb22410e939d963bbb2349c2570f02 to before 20863bb7fbb016379f8227122edfabc5c799bc79, f1ee616214cb22410e939d963bbb2349c2570f02 to before 8004d4b8cbf1bd68a23c160d57287e177c82cc69, f1ee616214cb22410e939d963bbb2349c2570f02 to before 7e0c8aaf4e28918abded547a5147c7d52c4af7d2, f1ee616214cb22410e939d963bbb2349c2570f02 to before cebfbf40056a4d858b2a3ca59a69936d599bd209, f1ee616214cb22410e939d963bbb2349c2570f02 to before 620f3b0ede9c5cb4976cd0457d0b04ad551e5d6b, f1ee616214cb22410e939d963bbb2349c2570f02 to before eadc49999fa994d6fbd70c332bd5d5051cc42261, f1ee616214cb22410e939d963bbb2349c2570f02 to before 56094ad3eaa21e6621396cc33811d8f72847a834
Linux
Linux · 4.16
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: fs/dcache.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40106
Affected technology
Linux · ed9eccbe8970f6eedc1b978c157caf1251a896d4 to before 4ffea48c69cb2b96a281cb7e5e42d706996631db, ed9eccbe8970f6eedc1b978c157caf1251a896d4 to before 8f3e4cd9be4b47246ea73ce5e3e0fa2f57f0d10c, ed9eccbe8970f6eedc1b978c157caf1251a896d4 to before 2670932f2465793fea1ef073e40883e8390fa4d9, ed9eccbe8970f6eedc1b978c157caf1251a896d4 to before 6db19822512396be1a3e1e20c16c97270285ba1a, ed9eccbe8970f6eedc1b978c157caf1251a896d4 to before d4854eff25efb06d0d84c13e7129bbdba4125f8c, ed9eccbe8970f6eedc1b978c157caf1251a896d4 to before a4bb5d1bc2f238461bcbe5303eb500466690bb2c, ed9eccbe8970f6eedc1b978c157caf1251a896d4 to before 55520f65fd447e04099a2c44185453c18ea73b7e, ed9eccbe8970f6eedc1b978c157caf1251a896d4 to before 87b318ba81dda2ee7b603f4f6c55e78ec3e95974
Linux
Linux · 2.6.29
Linux
Component: Not specified by the source
Function: performs
File: drivers/comedi/comedi_buf.c
What an attacker can do
A attacker could trigger a divide-by-zero error. The description does not state a further attacker outcome.
CVE-2025-40109
Affected technology
Linux · 77ebdabe8de7c02f43c6de3357f79ff96f9f0579 to before 15d6f42da1bb527629d8e1067b1302d58dec9166, 77ebdabe8de7c02f43c6de3357f79ff96f9f0579 to before bd903c25b652c331831226cdf56c8179d18e43f4, 77ebdabe8de7c02f43c6de3357f79ff96f9f0579 to before 17acbcd44fe8dc17dc1072375e76df2d52da6ac8, 77ebdabe8de7c02f43c6de3357f79ff96f9f0579 to before ab172f4f42626549b02bada05f09e3f2b0cc26ec, 77ebdabe8de7c02f43c6de3357f79ff96f9f0579 to before c5c703b50e91dd4748769f4c5ab50d9ad60be370, 77ebdabe8de7c02f43c6de3357f79ff96f9f0579 to before e247a7d138e514a40edda7c4d72c8bd49bb2cad3, 77ebdabe8de7c02f43c6de3357f79ff96f9f0579 to before 915cb75983bc5e8b80f8a2f25a4af463f7b18c14, 77ebdabe8de7c02f43c6de3357f79ff96f9f0579 to before c0d36727bf39bb16ef0a67ed608e279535ebf0da
Linux
Linux · 5.10
Linux
Component: Not specified by the source
File: crypto/rng.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-40110
Affected technology
Linux · c0951b797e7d0f2c6b0df2c0e18185c72d0cf1a1 to before 3332212e93d0f6e24f8fe79f975e077c4e68ca39, c0951b797e7d0f2c6b0df2c0e18185c72d0cf1a1 to before 86aae7053d2da3fdfde7b2e84d86e4af50490505, c0951b797e7d0f2c6b0df2c0e18185c72d0cf1a1 to before af9d88cbf0fce52f465978360542ef679713491f, c0951b797e7d0f2c6b0df2c0e18185c72d0cf1a1 to before 299cfb5a7deabdf9ecd30071755672af0aced5eb, c0951b797e7d0f2c6b0df2c0e18185c72d0cf1a1 to before 13c9e4ed125e19484234c960efe5ac9c55119523, c0951b797e7d0f2c6b0df2c0e18185c72d0cf1a1 to before b6fca0a07989f361ceda27cb2d09c555d4d4a964, c0951b797e7d0f2c6b0df2c0e18185c72d0cf1a1 to before 5ac2c0279053a2c5265d46903432fb26ae2d0da2
Linux
Linux · 3.8
Linux
Component: Not specified by the source
File: drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-40111
Affected technology
Linux · 64ad2abfe9a628ce79859d072704bd1ef7682044 to before 1822e5287b7dfa59d0af966756ebf1dc652b60ee, 64ad2abfe9a628ce79859d072704bd1ef7682044 to before fb7165e5f3b3b10721ff70553583ad12e90e447a, 64ad2abfe9a628ce79859d072704bd1ef7682044 to before 4c918f9d1ccccc0e092f43dcb2d8266f54d7340b, 64ad2abfe9a628ce79859d072704bd1ef7682044 to before 9a8eaca539708ca532747f606d231f70e684e8ca, 64ad2abfe9a628ce79859d072704bd1ef7682044 to before 867bda5d95d36f10da398fd4409e21c7002b2332, 64ad2abfe9a628ce79859d072704bd1ef7682044 to before 655a2f29bfc21105c80bf8a7d7aafa6eca8b4496, 64ad2abfe9a628ce79859d072704bd1ef7682044 to before 65608e991c2d771c13404e5c7ae122ac3c3357a4, 64ad2abfe9a628ce79859d072704bd1ef7682044 to before dfe1323ab3c8a4dd5625ebfdba44dc47df84512a
Linux
Linux · 4.20
Linux
Component: Not specified by the source
File: drivers/gpu/drm/vmwgfx/vmwgfx_validation.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40112
Affected technology
Linux · 7ae3aaf53f1695877ccd5ebbc49ea65991e41f1e to before 05440320ea3e249d5f984918f2bf51210c1a7c03, 7ae3aaf53f1695877ccd5ebbc49ea65991e41f1e to before 7823fc4d8ab5e57f8db7806ff2530c03c166c4bb, 7ae3aaf53f1695877ccd5ebbc49ea65991e41f1e to before 37547d8e6eba87507279ee3dfddfd9dc46335454, 7ae3aaf53f1695877ccd5ebbc49ea65991e41f1e to before a365ee556e45f780ee322b349a06efdad0c1458f, 7ae3aaf53f1695877ccd5ebbc49ea65991e41f1e to before 8cdeb5e482d3fdce7e825444b6ca3865e24c0228, 7ae3aaf53f1695877ccd5ebbc49ea65991e41f1e to before a90ce516a73dbe087f9bf3dbf311301a58d125c6, 7ae3aaf53f1695877ccd5ebbc49ea65991e41f1e to before 088c5098ec6d6b0396edfbf3dad3e81de8469c1c, 7ae3aaf53f1695877ccd5ebbc49ea65991e41f1e to before 0b67c8fc10b13a9090340c5f8a37d308f4e1571c, bfc8be6593097cb074d3912ba2f27565cfbb7d6e, a15859f9d8396cce7c55ccdb7e75f70f14cbc349, 4.4.34 to before 4.5, 4.8.10 to before 4.9
Linux
Linux · 4.9
Linux
Component: Not specified by the source
Function: and
File: arch/sparc/lib/NGmemcpy.S
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40115
Affected technology
Linux · f92363d12359498f9a9960511de1a550f0ec41c2 to before b3a6d153861d0f29b80882470d14aafb8d687dc2, f92363d12359498f9a9960511de1a550f0ec41c2 to before 4e1442bae50ed633c2fe8058f47cd79b4ad88b9b, f92363d12359498f9a9960511de1a550f0ec41c2 to before a89253eb4e648deace48a4e38996afd182eb95e3, f92363d12359498f9a9960511de1a550f0ec41c2 to before fa153fb40c61f8ca01237427c97a0b93ba32c403, f92363d12359498f9a9960511de1a550f0ec41c2 to before 6459dba4f35017448535a799cf699d5205eb5489, f92363d12359498f9a9960511de1a550f0ec41c2 to before 1fd39e14d47d9b4965dd5c9cff16e64ba3e71a62, f92363d12359498f9a9960511de1a550f0ec41c2 to before 970ceb1bdc3d6c2af9245d6eca38606e74fcb6b8, f92363d12359498f9a9960511de1a550f0ec41c2 to before 1703fe4f8ae50d1fb6449854e1fcaed1053e3a14
Linux
Linux · 3.8
Linux
Component: Not specified by the source
File: drivers/scsi/mpt3sas/mpt3sas_transport.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-40116
Affected technology
Linux · 05dfa5c9bc37933181b619e42ec0eeb41ef31362 to before 89838fe5c6c010ff8d3924f22afd9c18c5c95310, 05dfa5c9bc37933181b619e42ec0eeb41ef31362 to before 3facf69a735e730ae36387f18780fe420708aa91, 05dfa5c9bc37933181b619e42ec0eeb41ef31362 to before e0e0ce06f3571be9b26790e4df56ba37b1de8543, 05dfa5c9bc37933181b619e42ec0eeb41ef31362 to before 3723c3dda1cc82c9bbca08fcbd46705a361bfd56, 05dfa5c9bc37933181b619e42ec0eeb41ef31362 to before b0439e3762ac9ea580f714e1504a1827d1ad32f5, 05dfa5c9bc37933181b619e42ec0eeb41ef31362 to before e68ea6de1d0551f90d7a2c75f82cb3ebe5e397dc, 05dfa5c9bc37933181b619e42ec0eeb41ef31362 to before b682ce44bf20ada752a2f6ce70d5a575c56f6a35, 05dfa5c9bc37933181b619e42ec0eeb41ef31362 to before 186e8f2bdba551f3ae23396caccd452d985c23e3
Linux
Linux · 3.16
Linux
Component: Not specified by the source
Function: returns
File: drivers/usb/host/max3421-hcd.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-40118
Affected technology
Linux · 05b512879eab41faa515b67fa3896d0005e97909 to before d94be0a6ae9ade706d4270e740bdb4f79953a7fc, bc2140c8136200b4437e1abc0fb659968cb9baab to before 45acbf154befedd9bc135f5e031fe7855d1e6493, 1d8f9378cb4800c18e20d80ecd605b2b93e87a03 to before eef5ef400893f8e3dbb09342583be0cdc716d566, 30e482dfb8f27d22f518695d4bcb5e7f4c6cb08a to before 9c671d4dbfbfb0d73cfdfb706afb36d9ad60a582, a862d24e1fc3ab1b5e5f20878d2898cea346d0ec to before e62251954a128a2d0fcbc19e5fa39e08935bb628, 0f9802f174227f553959422f844eeb9ba72467fe to before 9326a1541e1b7ed3efdbab72061b82cf01c6477a, f7b705c238d1483f0a766e2b20010f176e5c0fb7 to before 83ced3c206c292458e47c7fac54223abc7141585, f7b705c238d1483f0a766e2b20010f176e5c0fb7 to before 251be2f6037fb7ab399f68cd7428ff274133d693, 722026c010fa75bcf9e2373aff1d7930a3d7e3cf, 5.4.293 to before 5.4.301, 5.10.237 to before 5.10.246, 5.15.181 to before 5.15.195, 6.1.136 to before 6.1.156, 6.6.89 to before 6.6.112, 6.12.26 to before 6.12.53, 6.14.5 to before 6.15
Linux
Linux · 6.15
Linux
Component: Not specified by the source
File: drivers/scsi/pm8001/pm8001_sas.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40120
Affected technology
Linux · 4a2c7217cd5a87e85ceb761e307b030fe6db4805 to before 71a0ba7fdaf8d035426912a4ed7bf1738a81010c, 4a2c7217cd5a87e85ceb761e307b030fe6db4805 to before 3e96cd27ff1a004d84908c1b6cc68ac60913874e, 4a2c7217cd5a87e85ceb761e307b030fe6db4805 to before 724a9db84188f80ef60b1f21cc7b4e9c84e0cb64, 4a2c7217cd5a87e85ceb761e307b030fe6db4805 to before 1534517300e12f2930b6ff477b8820ff658afd11, 4a2c7217cd5a87e85ceb761e307b030fe6db4805 to before 9d8bcaf6fae1bd82bc27ec09a2694497e6f6c4b4, 4a2c7217cd5a87e85ceb761e307b030fe6db4805 to before 3d3c4cd5c62f24bb3cb4511b7a95df707635e00a
Linux
Linux · 5.14
Linux
Component: Not specified by the source
File: drivers/net/usb/asix_devices.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-40121
Affected technology
Linux · 64484ccee7af53f08cca2ee3853cb8e18914d8b2 to before bff827b0d507e52b23efab9f67c232a4f037ab2c, 64484ccee7af53f08cca2ee3853cb8e18914d8b2 to before 64a36a7032082b4c330ce081acb6efb99246020e, 64484ccee7af53f08cca2ee3853cb8e18914d8b2 to before 95e29db33b5f73218ae08ebb48c61c9a8d28e2ff, 64484ccee7af53f08cca2ee3853cb8e18914d8b2 to before 2204e582b4eea872e1e7a5c90edcb84b928c68b0, 64484ccee7af53f08cca2ee3853cb8e18914d8b2 to before f197894de2f4ef46c7d53827d9df294b75c35e13, 64484ccee7af53f08cca2ee3853cb8e18914d8b2 to before fdf99978a6480e14405212472b6c747e0fa43bed, 64484ccee7af53f08cca2ee3853cb8e18914d8b2 to before c60f269c123210a6846d6d1367de0eaa402c10b0, 64484ccee7af53f08cca2ee3853cb8e18914d8b2 to before 4336efb59ef364e691ef829a73d9dbd4d5ed7c7b
Linux
Linux · 4.18
Linux
Component: Not specified by the source
File: sound/soc/intel/boards/bytcr_rt5651.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-40124
Affected technology
Linux · ee841d0aff649164080e445e84885015958d8ff4 to before fdd43fe6d286f27b826572457a89c926f97e2d3a, ee841d0aff649164080e445e84885015958d8ff4 to before 1198077606aeffb102587c6ea079ce99641c99d4, ee841d0aff649164080e445e84885015958d8ff4 to before 1857cdca12c4aff58bf26a7005a4d02850c29927, ee841d0aff649164080e445e84885015958d8ff4 to before 91eda032eb16e5d2be27c95584665bc555bb5a90, ee841d0aff649164080e445e84885015958d8ff4 to before dc766c4830a7e1e1ee9d7f77d4ab344f2eb23c8e, ee841d0aff649164080e445e84885015958d8ff4 to before 5ef9c94d7110e90260c06868cf1dcf899b9f25ee, ee841d0aff649164080e445e84885015958d8ff4 to before e50377c6b3f278c9f3ef017ffce17f5fcc9dace4, ee841d0aff649164080e445e84885015958d8ff4 to before 47b49c06eb62504075f0f2e2227aee2e2c2a58b3, 1c7e17b1c4d60cc5aa575460f7efb73686dd3b39, ac663c54f40b2830b1ca32d1ae9d683fe248b14c, 4.4.34 to before 4.5, 4.8.10 to before 4.9
Linux
Linux · 4.9
Linux
Component: Not specified by the source
Function: and
File: arch/sparc/lib/U3memcpy.S
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40125
Affected technology
Linux · 477e19dedc9d3e1f4443a1d4ae00572a988120ea to before a8c53553f1833cc2d14175d2d72cf37193a01898, 477e19dedc9d3e1f4443a1d4ae00572a988120ea to before cc14ea21c4e658814d737ed4dedde6cd626a15ad, 477e19dedc9d3e1f4443a1d4ae00572a988120ea to before 4b97e99b87a773d52699521d40864f3ec888e9a6, 477e19dedc9d3e1f4443a1d4ae00572a988120ea to before 6e7dadc5763c48eb3b9b91265a21f312599ebb2c, 477e19dedc9d3e1f4443a1d4ae00572a988120ea to before 06c4826b1d900611096e4621e93133db57e13911, 477e19dedc9d3e1f4443a1d4ae00572a988120ea to before babc634e9fe2803962dba98a07587e835dbc0731, 477e19dedc9d3e1f4443a1d4ae00572a988120ea to before d5ddd76ee52bdc16e9f8b1e7791291e785dab032, 477e19dedc9d3e1f4443a1d4ae00572a988120ea to before 4c7ef92f6d4d08a27d676e4c348f4e2922cab3ed
Linux
Linux · 4.20
Linux
Component: Not specified by the source
File: block/blk-mq-sysfs.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-40126
Affected technology
Linux · cb736fdbb208eb3420f1a2eb2bfc024a6e9dcada to before 0bf3dc3a2156f1c5ddaba4b85d09767874634114, cb736fdbb208eb3420f1a2eb2bfc024a6e9dcada to before 41c18baee66134e6ef786eb075c1b6adb22432b0, cb736fdbb208eb3420f1a2eb2bfc024a6e9dcada to before 59424dc0d0e044b2eb007686a4724ddd91d57db5, cb736fdbb208eb3420f1a2eb2bfc024a6e9dcada to before 9b137f277cc3297044aabd950f589e505d30104c, cb736fdbb208eb3420f1a2eb2bfc024a6e9dcada to before 674ff598148a28bae0b5372339de56f2abf0b1d1, cb736fdbb208eb3420f1a2eb2bfc024a6e9dcada to before 7de3a75bbc8465d816336c74d50109e73501efab, cb736fdbb208eb3420f1a2eb2bfc024a6e9dcada to before 57c278500fce3cd4e1c540700c0b05426a958393, cb736fdbb208eb3420f1a2eb2bfc024a6e9dcada to before 4fba1713001195e59cfc001ff1f2837dab877efb, 1731d90d8a558ecb20cdee0c2c001ae8e15c251d, b0580eadc19ff3a617a7d07cfaf2a985153c114e, 4.4.34 to before 4.5, 4.8.10 to before 4.9
Linux
Linux · 4.9
Linux
Component: Not specified by the source
Function: and
File: arch/sparc/lib/U1memcpy.S
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-40127
Affected technology
Linux · 6d01d8511dceb9cd40f72eb102b7d24f0b2e997b to before 692a04a1e0cde1d80a33df0078c755cf02cd7268, 6d01d8511dceb9cd40f72eb102b7d24f0b2e997b to before d76b099011fa056950f63d05ebb6160991242f6a, 6d01d8511dceb9cd40f72eb102b7d24f0b2e997b to before eec7e0e19c1fa75dc65e25aa6a21ef24a03849af, 6d01d8511dceb9cd40f72eb102b7d24f0b2e997b to before f4238064379a91e71a9c258996acac43c50c2094, 6d01d8511dceb9cd40f72eb102b7d24f0b2e997b to before 2b6bcce32cb5aff84588a844a4d3f6dd5353b8e2, 6d01d8511dceb9cd40f72eb102b7d24f0b2e997b to before 55a70e1de75e5ff5f961c79a2cdc6a4468cc2bf2, 6d01d8511dceb9cd40f72eb102b7d24f0b2e997b to before 612b1dfeb414dfa780a6316014ceddf9a74ff5c0
Linux
Linux · 5.5
Linux
Component: Not specified by the source
File: drivers/char/hw_random/ks-sa-rng.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-40134
Affected technology
Linux · c4576aed8d85d808cd6443bda58393d525207d01 to before 9dc43ea6a20ff83fe9a5fe4be47ae0fbf2409b98, c4576aed8d85d808cd6443bda58393d525207d01 to before 30f95b7eda5966b81cb221bd569c0f095a068cf6, c4576aed8d85d808cd6443bda58393d525207d01 to before a0e54bd8d7ea79127fe9920df3ae36f85e79ac7c, c4576aed8d85d808cd6443bda58393d525207d01 to before a802901b75e13cc306f1b7ab0f062135c8034e9e, c4576aed8d85d808cd6443bda58393d525207d01 to before 846cafc4725ca727d94f9c4b5f789c1a7c8fb6fe, c4576aed8d85d808cd6443bda58393d525207d01 to before 19ca4528666990be376ac3eb6fe667b03db5324d, c4576aed8d85d808cd6443bda58393d525207d01 to before 331c2dd8ca8bad1a3ac10cce847ffb76158eece4, c4576aed8d85d808cd6443bda58393d525207d01 to before 8d33a030c566e1f105cd5bf27f37940b6367f3be
Linux
Linux · 5.0
Linux
Component: Not specified by the source
File: drivers/md/dm.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-40140
Affected technology
Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before cce3c0e21cdd15bcba5c35d3af1700186de8f187, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1a08a37ac03d07a1608a1592791041cac979fbc3, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 54f8ef1a970a8376e5846ed90854decf7c00555d, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 114e05344763a102a8844efd96ec06ba99293ccd, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6394bade9daab8e318c165fe43bba012bf13cd8e, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6053e47bbf212b93c051beb4261d7d5a409d0ce3, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 9d72df7f5eac946f853bf49c428c4e87a17d91da, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 958baf5eaee394e5fd976979b0791a875f14a179
Linux
Linux · 2.6.12
Linux
Component: Not specified by the source
Function: dev_set_rx_mode
File: drivers/net/usb/rtl8150.c
Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40149
Affected technology
linux kernel · from 4.18 (inclusive), before 5.15.199 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.161 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.121 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.66 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.17.3 (exclusive)
linux
Linux · e8f69799810c32dd40c6724d829eccc70baad07f to before 2b1bef126bbb8d0da51491357559126d567c1dee, e8f69799810c32dd40c6724d829eccc70baad07f to before e37ca0092ddace60833790b4ad7a390408fb1be9, e8f69799810c32dd40c6724d829eccc70baad07f to before 13159c7125636371543a82cb7bbae00ab36730cc, e8f69799810c32dd40c6724d829eccc70baad07f to before f09cd209359a23f88d4f3fa3d2379d057027e53c, e8f69799810c32dd40c6724d829eccc70baad07f to before feb474ddbf26b51f462ae2e60a12013bdcfc5407, e8f69799810c32dd40c6724d829eccc70baad07f to before c65f27b9c3be2269918e1cbad6d8884741f835c5
Linux
Linux · 4.18
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: net/tls/tls_device.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40153
Affected technology
Linux · 8f860591ffb29738cf5539b6fbf27f50dcdeb380 to before 30498c44c2a0b20f6833ed7d8fc3df901507f760, 8f860591ffb29738cf5539b6fbf27f50dcdeb380 to before 5783485ab2be06be5312b26c8793526edc09123d, 8f860591ffb29738cf5539b6fbf27f50dcdeb380 to before 547e123e9d342a44c756446640ed847a8aeec611, 8f860591ffb29738cf5539b6fbf27f50dcdeb380 to before 957faf9582f92bb2be8ebe4ab6aa1c2bc71d9859, 8f860591ffb29738cf5539b6fbf27f50dcdeb380 to before 964598e6f70a1be9fe675280bf16b4f96b0a6809, 8f860591ffb29738cf5539b6fbf27f50dcdeb380 to before 4975c975ed9457a77953a26aeef85fdba7cf5498, 8f860591ffb29738cf5539b6fbf27f50dcdeb380 to before c6096f3947f68f96defedb8764b3b1ca4cf3469f, 8f860591ffb29738cf5539b6fbf27f50dcdeb380 to before f52ce0ea90c83a28904c7cc203a70e6434adfecb
Linux
Linux · 2.6.17
Linux
Component: Not specified by the source
File: mm/hugetlb.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-40154
Affected technology
Linux · 063422ca2a9de238401c3848c1b3641c07b6316c to before 2c27e047bdcba457ec953f7e90e4ed6d5f8aeb01, 063422ca2a9de238401c3848c1b3641c07b6316c to before a97b4d18ecb012c5624cdf2cab2ce5e1312fdd5d, 063422ca2a9de238401c3848c1b3641c07b6316c to before dea9c8c9028c9374761224a7f9d824e845a2aa2e, 063422ca2a9de238401c3848c1b3641c07b6316c to before f58fca15f3bf8b982e799c31e4afa8923788aa40, 063422ca2a9de238401c3848c1b3641c07b6316c to before 29a41bf6422688f0c5a09b18222e1a64b2629fa4, 063422ca2a9de238401c3848c1b3641c07b6316c to before 5c03ea2ef4ebba75c69c90929d8590eb3d3797a9, 063422ca2a9de238401c3848c1b3641c07b6316c to before 48880f3cdf2b6d8dcd91219c5b5c8a7526411322, 063422ca2a9de238401c3848c1b3641c07b6316c to before fba404e4b4af4f4f747bb0e41e9fff7d03c7bcc0
Linux
Linux · 4.18
Linux
Component: Not specified by the source
File: sound/soc/intel/boards/bytcr_rt5640.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-40164
Affected technology
linux kernel · from 4.7.1 (inclusive), before 5.15.199 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.17.5 (exclusive)
linux
linux kernel · 4.7
linux
linux kernel · 4.7 · update rc7
linux
linux kernel · 6.18 · update rc1
linux
Linux · 43daa96b166c3cf5ff30dfac0c5efa2620e4beab to before 6635e52bc4165793aefd686962d912d73d323afe, 43daa96b166c3cf5ff30dfac0c5efa2620e4beab to before 65d04291adf7c59338f87aab9c6fe0bfa9993e64, 43daa96b166c3cf5ff30dfac0c5efa2620e4beab to before f45fffae5e2549bd0a4670cc52a15ad54c9f121e, 43daa96b166c3cf5ff30dfac0c5efa2620e4beab to before 17fbad93879e87a334062882b45fa727ba1b3dd7, 43daa96b166c3cf5ff30dfac0c5efa2620e4beab to before d1944bab8e0c1511f0cbf364aa06547735bb0ddb, 43daa96b166c3cf5ff30dfac0c5efa2620e4beab to before 0134c7bff14bd50314a4f92b182850ddfc38e255, 43daa96b166c3cf5ff30dfac0c5efa2620e4beab to before 327cd4b68b4398b6c24f10eb2b2533ffbfc10185
Linux
Linux · 4.7
Linux
Component: Not specified by the source
File: drivers/net/usb/usbnet.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40167
Affected technology
Linux · f19d5870cbf72d4cb2a8e1f749dff97af99b071e to before 4954d297c91d292630ab43ba4d195dc371ce65d3, f19d5870cbf72d4cb2a8e1f749dff97af99b071e to before f061f7c331fc16250fc82aa68964f35821687217, f19d5870cbf72d4cb2a8e1f749dff97af99b071e to before 2e9e10657b04152ed0d6ecae8d0c02a3405e28f5, f19d5870cbf72d4cb2a8e1f749dff97af99b071e to before 1437c95ab2a28b138d4521653583729f61ccb48b, f19d5870cbf72d4cb2a8e1f749dff97af99b071e to before cb6039b68efa547b676a8a10fc4618d9d1865c23, f19d5870cbf72d4cb2a8e1f749dff97af99b071e to before de985264eef64be8a90595908f2e6a87946dad34, f19d5870cbf72d4cb2a8e1f749dff97af99b071e to before 1f5ccd22ff482639133f2a0fe08f6d19d0e68717, f19d5870cbf72d4cb2a8e1f749dff97af99b071e to before 1d3ad183943b38eec2acf72a0ae98e635dc8456b
Linux
Linux · 3.8
Linux
Component: Not specified by the source
File: fs/ext4/inode.c
Attack conditions (Source advisory, CVSS 3.1): Local · No privileges required · User interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40171
Affected technology
Linux · 5e0bc09a52b6169ce90f7ac6e195791adb16cec4 to before 11269c08013f4ee8b8f5edc6c56700acb34092d0, 9e6987f8937a7bd7516aa52f25cb7e12c0c92ee8 to before a28112cc55013cd8cbd5d36b5115a5b851151bd9, eaf0971fdabf2a93c1429dc6bedf3bbe85dffa30 to before 060ecc81240ef9d60d9485a3a5eb55a0d6e7a25c, 710c69dbaccdac312e32931abcb8499c1525d397 to before 7331925c247b03b7767b8cd93cfe1b7aa2377850, 710c69dbaccdac312e32931abcb8499c1525d397 to before 7a619f8c869117ffed08365b377f66b7e1d941b4, 710c69dbaccdac312e32931abcb8499c1525d397 to before db5a5406fb7e5337a074385c7a3e53c77f2c1bd3, 1d86f79287206deec36d63b89c741cf542b6cadd, 5.15.150 to before 5.15.195, 6.1.80 to before 6.1.156, 6.6.19 to before 6.6.112, 6.7.7 to before 6.8
Linux
Linux · 6.8
Linux
Component: Not specified by the source
File: drivers/nvme/target/fc.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40173
Affected technology
Linux · 8eb30be0352d09165e94a41fef1c7b994dca0714 to before 566f8d5c8a443f2dd69c5460fdec43ed1c870c65, 8eb30be0352d09165e94a41fef1c7b994dca0714 to before 11f6066af3bfb8149aa16c42c0b0c5ea5b199a94, 8eb30be0352d09165e94a41fef1c7b994dca0714 to before 402b6985e872b4cf394bbbf33b503947a326a6cb, 8eb30be0352d09165e94a41fef1c7b994dca0714 to before 10fe967efe73c610e526ff7460581610633dee9c, 8eb30be0352d09165e94a41fef1c7b994dca0714 to before 48294a67863c9cfa367abb66bbf0ef6548ae124f, 8eb30be0352d09165e94a41fef1c7b994dca0714 to before eeb4345488672584db4f8c20a1ae13a212ce31c4, 8eb30be0352d09165e94a41fef1c7b994dca0714 to before b6eb25d870f1a8ae571fd3da2244b71df547824b, 8eb30be0352d09165e94a41fef1c7b994dca0714 to before 21f4d45eba0b2dcae5dbc9e5e0ad08735c993f16
Linux
Linux · 4.7
Linux
Component: Not specified by the source
File: include/net/ip_tunnels.h, net/ipv4/ip_tunnel.c, net/ipv6/ip6_tunnel.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40178
Affected technology
Linux · 17cf22c33e1f1b5e435469c84e43872579497653 to before 75dbc029c5359438be4a6f908bfbfdab969af776, 17cf22c33e1f1b5e435469c84e43872579497653 to before c2d09d724856b6f82ab688f65fc1ce833bb56333, 17cf22c33e1f1b5e435469c84e43872579497653 to before c3b654021931dc806ba086c549e8756c3f204a67, 17cf22c33e1f1b5e435469c84e43872579497653 to before e10c36a771c5cc910abd9fe4aa9033ee32a47c38, 17cf22c33e1f1b5e435469c84e43872579497653 to before 09d227c59d97efda7d5cc878a4335a6b2bb224c2, 17cf22c33e1f1b5e435469c84e43872579497653 to before 2076b916bf41be48799d1443df0f8fc75d12ccd0, 17cf22c33e1f1b5e435469c84e43872579497653 to before a0212978af1825b37da0b453b94d9b0e5af11478, 17cf22c33e1f1b5e435469c84e43872579497653 to before 006568ab4c5ca2309ceb36fa553e390b4aa9c0c7
Linux
Linux · 3.8
Linux
Component: Not specified by the source
File: kernel/pid.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-40179
Affected technology
Linux · 02f310fcf47fa9311d6ba2946a8d19e7d7d11f37 to before 95a21611b14ae0a401720645245a8db16f040995, 02f310fcf47fa9311d6ba2946a8d19e7d7d11f37 to before 566a1d6084563bd07433025aa23bcea4427de107, 02f310fcf47fa9311d6ba2946a8d19e7d7d11f37 to before 304fc34ff6fc8261138fd81f119e024ac3a129e9, 02f310fcf47fa9311d6ba2946a8d19e7d7d11f37 to before a2d803fab8a6c6a874277cb80156dc114db91921, 02f310fcf47fa9311d6ba2946a8d19e7d7d11f37 to before 2b9da798ff0f4d026c5f0f815047393ebe7d8859, 02f310fcf47fa9311d6ba2946a8d19e7d7d11f37 to before 0a6ce20c156442a4ce2a404747bb0fb05d54eeb3
Linux
Linux · 5.15
Linux
Component: Not specified by the source
File: fs/ext4/orphan.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-40183
Affected technology
Linux · b4ab31414970a7a03a5d55d75083f2c101a30592 to before 3fba965a9aac0fa3cbd8138436a37af9ab466d79, b4ab31414970a7a03a5d55d75083f2c101a30592 to before 057764172fcc6ee2ccb6c41351a55a9f054dc8fd, b4ab31414970a7a03a5d55d75083f2c101a30592 to before 2e67c2037382abb56497bb9d7b7e10be04eb5598, b4ab31414970a7a03a5d55d75083f2c101a30592 to before b6bfe44b6dbb14a31d86c475cdc9c7689534fb09, b4ab31414970a7a03a5d55d75083f2c101a30592 to before f36a305d30f557306d87c787ddffe094ac5dac89, b4ab31414970a7a03a5d55d75083f2c101a30592 to before 7404ce888a45eb7da0508b7cbbe6f2e95302eeb8, b4ab31414970a7a03a5d55d75083f2c101a30592 to before 23f3770e1a53e6c7a553135011f547209e141e72
Linux
Linux · 5.10
Linux
Component: Not specified by the source
File: net/core/filter.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40187
Affected technology
Linux · 30f6ebf65bc46161c5aaff1db2e6e7c76aa4a06b to before 1014b83778c8677f1d7a57c26dc728baa801ac62, 30f6ebf65bc46161c5aaff1db2e6e7c76aa4a06b to before 7f702f85df0266ed7b5bab81ba50394c92f3c928, 30f6ebf65bc46161c5aaff1db2e6e7c76aa4a06b to before dbceedc0213e75bf3e9f9f9e2f66b10699d004fe, 30f6ebf65bc46161c5aaff1db2e6e7c76aa4a06b to before 025419f4e216a3ae0d0cec622262e98e8078c447, 30f6ebf65bc46161c5aaff1db2e6e7c76aa4a06b to before c21f45cfa4a9526b34d76b397c9ef080668b6e73, 30f6ebf65bc46161c5aaff1db2e6e7c76aa4a06b to before d0e8f1445c19b1786759ba72a38267e1449bab7e, 30f6ebf65bc46161c5aaff1db2e6e7c76aa4a06b to before badbd79313e6591616c1b78e29a9b71efed7f035, 30f6ebf65bc46161c5aaff1db2e6e7c76aa4a06b to before 2f3119686ef50319490ccaec81a575973da98815
Linux
Linux · 4.17
Linux
Component: Not specified by the source
File: net/sctp/sm_statefuns.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40188
Affected technology
Linux · bbf0722c1c663b08f612bd8c58af27f45aa84862 to before da3cadb8b0f35d845b3e2fbb7d978cf6473fd221, bbf0722c1c663b08f612bd8c58af27f45aa84862 to before 5419c86ea134b8a5b8126f55fa5bc1ad7b3ca444, bbf0722c1c663b08f612bd8c58af27f45aa84862 to before 9ee5eb3d09217f115f63b7c102d110ccdb1b26af, bbf0722c1c663b08f612bd8c58af27f45aa84862 to before fd017aabd4273216ed4223f17991fc087163771f, bbf0722c1c663b08f612bd8c58af27f45aa84862 to before dc3a1c6237e7f8046e6d4109bcf1998452ccafad, bbf0722c1c663b08f612bd8c58af27f45aa84862 to before d9457e6258750692c3b27f80880a613178053c25, bbf0722c1c663b08f612bd8c58af27f45aa84862 to before 6cef9e4425143b19742044c8a675335821fa1994, bbf0722c1c663b08f612bd8c58af27f45aa84862 to before 3a4b9d027e4061766f618292df91760ea64a1fcc
Linux
Linux · 4.9
Linux
Component: Not specified by the source
File: drivers/pwm/pwm-berlin.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-40194
Affected technology
Linux · da5c504c7aae96db68c4b38e2564a88e91842d89 to before 15ac9579ebdaf22a37d7f60b3a8efc1029732ef9, da5c504c7aae96db68c4b38e2564a88e91842d89 to before bc26564bcc659beb6d977cd6eb394041ec2f2851, da5c504c7aae96db68c4b38e2564a88e91842d89 to before ad4e8f9bdbef11a19b7cb93e7f313bf59bdcc3b4, da5c504c7aae96db68c4b38e2564a88e91842d89 to before 0a58d3e77b22b087a57831c87cafd360e144a5bd, da5c504c7aae96db68c4b38e2564a88e91842d89 to before 69a18ff6c60e8e113420f15355fad862cb45d38e, da5c504c7aae96db68c4b38e2564a88e91842d89 to before ba63d4e9857a72a89e71a4eff9f2cc8c283e94c3, da5c504c7aae96db68c4b38e2564a88e91842d89 to before 57e4a6aadf12578b96a038373cffd54b3a58b092, da5c504c7aae96db68c4b38e2564a88e91842d89 to before 69e5d50fcf4093fb3f9f41c4f931f12c2ca8c467
Linux
Linux · 5.4
Linux
Component: Not specified by the source
File: drivers/cpufreq/intel_pstate.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-40200
Affected technology
Linux · 6545b246a2c815a8fcd07d58240effb6ec3481b1 to before 54170057a5fadd24a37b70de41e61d39284d9bd7, 6545b246a2c815a8fcd07d58240effb6ec3481b1 to before 2871c74caa3f4f05b429e6bfefebac62dbf1b408, 6545b246a2c815a8fcd07d58240effb6ec3481b1 to before fbfc745db628de31f5c089147deeb87e95b89e66, 6545b246a2c815a8fcd07d58240effb6ec3481b1 to before 8118f66124895829443d09c207e654adcb2f9321, 6545b246a2c815a8fcd07d58240effb6ec3481b1 to before 8c7aad76751816207fee556d44aa88a710824810, 6545b246a2c815a8fcd07d58240effb6ec3481b1 to before 875fb3f87ae0225b881319ba016a1a8c4ffd5812, 6545b246a2c815a8fcd07d58240effb6ec3481b1 to before f271155ff31aca8ef82c61c8df23ca97e9a77dd4, 6545b246a2c815a8fcd07d58240effb6ec3481b1 to before 9f1c14c1de1bdde395f6cc893efa4f80a2ae3b2b
Linux
Linux · 2.6.29
Linux
Component: Not specified by the source
File: fs/squashfs/inode.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-40204
Affected technology
Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b93fa8dc521d00d2d44bf034fb90e0d79b036617, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 0e8b8c326c2a6de4d837b1bb034ea704f4690d77, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1cd60e0d0fb8f0e62ec4499138afce6342dc9d4c, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 9c05d44ec24126fc283835b68f82dba3ae985209, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ed3044b9c810c5c24eb2830053fbfe5fd134c5d4, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8019b3699289fce3f10b63f98601db97b8d105b0, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 0b32ff285ff6f6f1ac1d9495787ccce8837d6405, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before dd91c79e4f58fbe2898dac84858033700e0e99fb
Linux
Linux · 2.6.12
Linux
Component: Not specified by the source
Function: for
File: net/sctp/sm_make_chunk.c, net/sctp/sm_statefuns.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 8.1/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40205
Affected technology
Linux · be6e8dc0ba84029997075a1ec77b4ddb863cbe15 to before 60de2f55d2aca53e81b4ef2a67d7cc9e1eb677db, be6e8dc0ba84029997075a1ec77b4ddb863cbe15 to before 742b44342204e5dfe3926433823623c1a0c581df, be6e8dc0ba84029997075a1ec77b4ddb863cbe15 to before d3a9a8e1275eb9b87f006b5562a287aea3f6885f, be6e8dc0ba84029997075a1ec77b4ddb863cbe15 to before d91f6626133698362bba08fbc04bd72c466806d3, be6e8dc0ba84029997075a1ec77b4ddb863cbe15 to before 0276c8582488022f057b4cec21975a5edf079f47, be6e8dc0ba84029997075a1ec77b4ddb863cbe15 to before 361d67276eb8ec6be8f27f4ad6c6090459438fee, be6e8dc0ba84029997075a1ec77b4ddb863cbe15 to before 43143776b0a7604d873d1a6f3e552a00aa930224, be6e8dc0ba84029997075a1ec77b4ddb863cbe15 to before dff4f9ff5d7f289e4545cc936362e01ed3252742
Linux
Linux · 2.6.29
Linux
Component: Not specified by the source
Function: only, writes, returns
File: fs/btrfs/export.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40211
Affected technology
Linux · 8ab58e8e7e097bae5fe39cbc67eb93a91f7134b7 to before 3f803ccf5a0c043e7c8b83f6665b082401fc8bee, 8ab58e8e7e097bae5fe39cbc67eb93a91f7134b7 to before ba1704316492a0496c69334338ea1fdbf4c2fd34, 8ab58e8e7e097bae5fe39cbc67eb93a91f7134b7 to before bc78a4f51d548c1ccc3d1967c2b394bf687c86e9, 8ab58e8e7e097bae5fe39cbc67eb93a91f7134b7 to before a63a5b6fb508d78fe57ae3b159d9ef3af7ba80e9, 8ab58e8e7e097bae5fe39cbc67eb93a91f7134b7 to before 4e85246ec0d019dfba86ba54d841ef6694f97149, 8ab58e8e7e097bae5fe39cbc67eb93a91f7134b7 to before de5fc93275a4a459fe2f7cb746984f2ab3e8292a, 8ab58e8e7e097bae5fe39cbc67eb93a91f7134b7 to before 293125536ef5521328815fa7c76d5f9eb1635659, 8ab58e8e7e097bae5fe39cbc67eb93a91f7134b7 to before 8f067aa59430266386b83c18b983ca583faa6a11
Linux
Linux · 3.17
Linux
Component: Not specified by the source
File: drivers/acpi/acpi_video.c
What an attacker can do
A attacker can trigger a use-after-free error. The description does not state a further attacker outcome.
CVE-2025-40215
Affected technology
Linux · 9d4139c76905833afcb77fe8ccc17f302a0eb9ab to before 1b28a7fae0128fa140a7dccd995182ff6cd1c67b, 9d4139c76905833afcb77fe8ccc17f302a0eb9ab to before 4b2c17d0f9be8b58bb30468bc81a4b61c985b04e, 9d4139c76905833afcb77fe8ccc17f302a0eb9ab to before 0da961fa46da1b37ef868d9b603bd202136f8f8e, 9d4139c76905833afcb77fe8ccc17f302a0eb9ab to before d0e0d1097118461463b76562c7ebaabaa5b90b13, 9d4139c76905833afcb77fe8ccc17f302a0eb9ab to before dc3636912d41770466543623cb76e7b88fdb42c7, 9d4139c76905833afcb77fe8ccc17f302a0eb9ab to before b441cf3f8c4b8576639d20c8eb4aa32917602ecd
Linux
Linux · 2.6.29
Linux
Component: Not specified by the source
File: include/net/xfrm.h, net/ipv4/ipcomp.c, net/ipv6/ipcomp6.c, net/ipv6/xfrm6_tunnel.c, net/xfrm/xfrm_ipcomp.c, net/xfrm/xfrm_state.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40219
Affected technology
Linux · 18f9e9d150fccfa747875df6f0a9f606740762b3 to before 3cddde484471c602bea04e6f384819d336a1ff84, 18f9e9d150fccfa747875df6f0a9f606740762b3 to before d7673ac466eca37ec3e6b7cc9ccdb06de3304e9b, 18f9e9d150fccfa747875df6f0a9f606740762b3 to before 7c37920c96b85ef4255a7acc795e99e63dd38d59, 18f9e9d150fccfa747875df6f0a9f606740762b3 to before 1047ca2d816994f31e1475e63e0c0b7825599747, 18f9e9d150fccfa747875df6f0a9f606740762b3 to before 97c18f074ff1c12d016a0753072a3afdfa0b9611, 18f9e9d150fccfa747875df6f0a9f606740762b3 to before bea1d373098b22d7142da48750ce5526096425bc, 18f9e9d150fccfa747875df6f0a9f606740762b3 to before f3015627b6e9ddf85cfeaf42405b3c194dde2c36, 18f9e9d150fccfa747875df6f0a9f606740762b3 to before a5338e365c4559d7b4d7356116b0eb95b12e08d5
Linux
Linux · 5.0
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: drivers/pci/iov.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40220
Affected technology
Linux · 5a18ec176c934ca1bc9dc61580a5e0e90a9b5733 to before 548e1f2bac1d4df91a6138f26bb4ab00323fd948, 5a18ec176c934ca1bc9dc61580a5e0e90a9b5733 to before cfd1aa3e2b71f3327cb373c45a897c9028c62b35, 5a18ec176c934ca1bc9dc61580a5e0e90a9b5733 to before 83b375c6efef69b1066ad2d79601221e7892745a, 5a18ec176c934ca1bc9dc61580a5e0e90a9b5733 to before bfd17b6138df0122a95989457d8e18ce0b86165e, 5a18ec176c934ca1bc9dc61580a5e0e90a9b5733 to before b26923512dbe57ae4917bafd31396d22a9d1691a, 5a18ec176c934ca1bc9dc61580a5e0e90a9b5733 to before f19a1390af448d9e193c08e28ea5f727bf3c3049, 5a18ec176c934ca1bc9dc61580a5e0e90a9b5733 to before 26e5c67deb2e1f42a951f022fdf5b9f7eb747b01, 9efe56738fecd591b5bf366a325440f9b457ebd6, 5c46eb076e0a1b2c1769287cd6942e4594ade1b1, 83e6726210d6c815ce044437106c738eda5ff6f6, 23d154c71721fd0fa6199851078f32e6bd765664, ca3edc920f5fd7d8ac040caaf109f925c24620a0, 2.6.32.32 to before 2.6.33, 2.6.33.8 to before 2.6.34, 2.6.34.10 to before 2.6.35, 2.6.35.12 to before 2.6.36, 2.6.37.3 to before 2.6.38
Linux
Linux · 2.6.38
Linux
Component: Not specified by the source
File: fs/fuse/file.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40223
Affected technology
Linux · 97a6f772f36b7f52bcfa56a581bbd2470cffe23d to before 5b5c478f09b1b35e7fe6fc9a1786c9bf6030e831, 97a6f772f36b7f52bcfa56a581bbd2470cffe23d to before 578eb18cd111addec94c43f61cd4b4429e454809, 97a6f772f36b7f52bcfa56a581bbd2470cffe23d to before 33daf469f5294b9d07c4fc98216cace9f4f34cc6, 97a6f772f36b7f52bcfa56a581bbd2470cffe23d to before 72427dc6f87523995f4e6ae35a948bb2992cabce, 97a6f772f36b7f52bcfa56a581bbd2470cffe23d to before f93a84ffb884d761a9d4e869ba29c238711e81f1, 97a6f772f36b7f52bcfa56a581bbd2470cffe23d to before 3a3b8e89c7201c5b3b76ac4a4069d1adde1477d6, 97a6f772f36b7f52bcfa56a581bbd2470cffe23d to before 4b1270902609ef0d935ed2faa2ea6d122bd148f5
Linux
Linux · 5.9
Linux
Component: Not specified by the source
File: drivers/most/most_usb.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
A local attacker with low privileges could trigger a use-after-free error. Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as high. The description does not state a further attacker outcome.
CVE-2025-40231
Affected technology
Linux · 8667e8d0eb46bc54fdae30ba2f4786407d3d88eb to before ce4f856c64f0bc30e29302a0ce41f4295ca391c5, 36a439049b34cca0b3661276049b84a1f76cc21a to before 09bba278ccde25a14b6e5088a9e65a8717d0cccf, 9ce53e744f18e73059d3124070e960f3aa9902bf to before b44182c116778feaa05da52a426aeb9da1878dcf, 9d24bb6780282b0255b9929abe5e8f98007e2c6e to before 42ed0784d11adebf748711e503af0eb9f1e6d81d, ae2c712ba39c7007de63cb0c75b51ce1caaf1da5 to before 251caee792a21eb0b781aab91362b422c945e162, 687aa0c5581b8d4aa87fd92973e4ee576b550cdf to before a2a4346eea8b4cb75037dbcb20b98cb454324f80, 687aa0c5581b8d4aa87fd92973e4ee576b550cdf to before f7c877e7535260cc7a21484c994e8ce7e8cb6780, 7b73bddf54777fb62d4d8c7729d0affe6df04477, 5.10.240 to before 5.10.246, 5.15.189 to before 5.15.196, 6.1.146 to before 6.1.158, 6.6.99 to before 6.6.115, 6.12.39 to before 6.12.56, 6.15.7 to before 6.16
Linux
Linux · 6.16
Linux
Component: Not specified by the source
File: net/vmw_vsock/af_vsock.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-40233
Affected technology
Linux · 53069d4e76954e2e63c1b3c501051c6fbcf7298c to before 93166bc53c0e3587058327a4121daea34b4fecd5, 53069d4e76954e2e63c1b3c501051c6fbcf7298c to before a7ee72286efba1d407c6f15a0528e43593fb7007, 53069d4e76954e2e63c1b3c501051c6fbcf7298c to before 93b1ab422f1966b71561158e1aedce4ec100f357, 53069d4e76954e2e63c1b3c501051c6fbcf7298c to before e92af7737a94a729225d2a5d180eaaa77fe0bbc1, 53069d4e76954e2e63c1b3c501051c6fbcf7298c to before aa6a21409dd6221bb268b56bb410e031c632ff9a, 53069d4e76954e2e63c1b3c501051c6fbcf7298c to before bb69928ed578f881e68d26aaf1a8f6e7faab3b44, 53069d4e76954e2e63c1b3c501051c6fbcf7298c to before a21750df2f6169af6e039a3bb4893d6c9564e48d, 53069d4e76954e2e63c1b3c501051c6fbcf7298c to before 78a63493f8e352296dbc7cb7b3f4973105e8679e
Linux
Linux · 3.0
Linux
Component: Not specified by the source
File: fs/ocfs2/move_extents.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40240
Affected technology
Linux · 90017accff61ae89283ad9a51f9ac46ca01633fb to before 61cda2777b07d27459f5cac5a047c3edf9c8a1a9, 90017accff61ae89283ad9a51f9ac46ca01633fb to before 08165c296597075763130919f2aae59b5822f016, 90017accff61ae89283ad9a51f9ac46ca01633fb to before 03e80a4b04ef1fb2c61dd63216ab8d3a5dcb196f, 90017accff61ae89283ad9a51f9ac46ca01633fb to before 4f6da435fb5d8a21cbf8cae5ca5a2ba0e1012b71, 90017accff61ae89283ad9a51f9ac46ca01633fb to before cb9055ba30306ede4ad920002233d0659982f1cb, 90017accff61ae89283ad9a51f9ac46ca01633fb to before 7a832b0f99be19df608cb75c023f8027b1789bd1, 90017accff61ae89283ad9a51f9ac46ca01633fb to before 89b465b54227c245ddc7cc9ed822231af21123ef, 90017accff61ae89283ad9a51f9ac46ca01633fb to before 441f0647f7673e0e64d4910ef61a5fb8f16bfb82
Linux
Linux · 4.8
Linux
Component: Not specified by the source
File: net/sctp/inqueue.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40243
Affected technology
Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before fc56548fca732f3d3692c83b40db796259a03887, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before bf1683078fbdd09a7f7f9b74121ebaa03432bd00, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2a112cdd66f5a132da5235ca31a320528c86bf33, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before e148ed5cda8fd96d4620c4622fb02f552a2d166a, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before cfafefcb0e1fc60135f7040f4aed0a4aef4f76ca, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 3b447fd401824e1ccf0b769188edefe866a1e676, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 502fa92a71f344611101bd04ef1a595b8b6014f5, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2048ec5b98dbdfe0b929d2e42dc7a54c389c53dd
Linux
Linux · 2.6.12
Linux
Component: Not specified by the source
File: fs/hfs/mdb.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40244
Affected technology
Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c1ec90bed504640a42bb20a5f413be39cd17ad71, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b8a72692aa42b7dcd179a96b90bc2763ac74576a, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c135b8dca65526aa5b8814e9954e0ae317d9c598, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d7e313039a8f3a6ee072dc5ff4643234d2d735cf, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a5bfb13b4f406aef1a450f99d22d3e48df01528c, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 99202d94909d323a30d154ab0261c0a07166daec, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 14c673a2f3ecf650b694a52a88688f1d71849899, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 4840ceadef4290c56cc422f0fc697655f3cbf070
Linux
Linux · 2.6.12
Linux
Component: Not specified by the source
File: fs/hfsplus/bfind.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40245
Affected technology
Linux · 7f7bc20bc41a4fbcd2db75b375ac95e5faf958ae to before 25f09699edd360b534ccae16bc276c3b52c471f3, 7f7bc20bc41a4fbcd2db75b375ac95e5faf958ae to before 5c3e38a367822f036227dd52bac82dc4a05157e2, 7f7bc20bc41a4fbcd2db75b375ac95e5faf958ae to before b1ec9faef7e36269ca3ec890972a78effbaeb975, 7f7bc20bc41a4fbcd2db75b375ac95e5faf958ae to before 90f5f715550e07cd6a51f80fc3f062d832c8c997, 7f7bc20bc41a4fbcd2db75b375ac95e5faf958ae to before 8912814f14e298b83df072fecc1f7ed1b63b1b2c, 7f7bc20bc41a4fbcd2db75b375ac95e5faf958ae to before a20b83cf45be2057f3d073506779e52c7fa17f94
Linux
Linux · 5.12
Linux
Component: Not specified by the source
File: arch/nios2/kernel/setup.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40248
Affected technology
Linux · d021c344051af91f42c5ba9fdedc176740cbd238 to before 3f71753935d648082a8279a97d30efe6b85be680, d021c344051af91f42c5ba9fdedc176740cbd238 to before da664101fb4a0de5cb70d2bae6a650df954df2af, d021c344051af91f42c5ba9fdedc176740cbd238 to before 67432915145848658149683101104e32f9fd6559, d021c344051af91f42c5ba9fdedc176740cbd238 to before eeca93f06df89be5a36305b7b9dae1ed65550dfc, d021c344051af91f42c5ba9fdedc176740cbd238 to before 5998da5a8208ae9ad7838ba322bccb2bdcd95e81, d021c344051af91f42c5ba9fdedc176740cbd238 to before f1c170cae285e4b8f61be043bb17addc3d0a14b5, d021c344051af91f42c5ba9fdedc176740cbd238 to before ab6b19f690d89ae4709fba73a3c4a7911f495b7a, d021c344051af91f42c5ba9fdedc176740cbd238 to before 002541ef650b742a198e4be363881439bb9d86b4
Linux
Linux · 3.9
Linux
RUGGEDCOM RST2428P · 0 to before V4.0
Siemens
Component: Not specified by the source
File: net/vmw_vsock/af_vsock.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
A local attacker with low privileges could trigger a use-after-free error. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not state a further attacker outcome.
CVE-2025-40252
Affected technology
Linux · 55482edc25f0606851de42e73618f813f310d009 to before ecbb12caf399d7cf364b7553ed5aebeaa2f255bc, 55482edc25f0606851de42e73618f813f310d009 to before a778912b4a53587ea07d85526d152f85d109cbfe, 55482edc25f0606851de42e73618f813f310d009 to before f0923011c1261b33a2ac1de349256d39cb750dd0, 55482edc25f0606851de42e73618f813f310d009 to before 917a9d02182ac8b4f25eb47dc02f3ec679608c24, 55482edc25f0606851de42e73618f813f310d009 to before e441db07f208184e0466abf44b389a81d70c340e, 55482edc25f0606851de42e73618f813f310d009 to before 896f1a2493b59beb2b5ccdf990503dbb16cb2256
Linux
Linux · 4.6
Linux
RUGGEDCOM RST2428P · 0 to before V4.0
Siemens
Component: Not specified by the source
File: drivers/net/ethernet/qlogic/qede/qede_fp.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40253
Affected technology
Linux · 467ddbbe7e749d558f13e640f50f546149c930b3 to before 06f1dd1de0d33dbfbd2e1fc9fc57d8895f730de2, 4d3c6d741816539b57fa1110c3f765a8c176d7b4 to before 6bf8ccaabce8cebb6cb1f255c93d0acdfe95c17a, 2bd57101c3ecf3f8c0da1d26c2b6ad511adc6d50 to before 7616e2eee679746d526c7f5befd4eedb995935b5, 0c0b20587b9f25a2ad14db7f80ebe49bdf29920a to before 43096dab8cc60fc39133205fd149a54d3acebea8, 0c0b20587b9f25a2ad14db7f80ebe49bdf29920a to before 3b177b2ded563df16f6d5920671ffcfe5915d472, 0c0b20587b9f25a2ad14db7f80ebe49bdf29920a to before b9dbfb1b5699f9f1e4991f96741bdf9047147589, 0c0b20587b9f25a2ad14db7f80ebe49bdf29920a to before 7ff76f8dc6b550f8d16487bf3cebc278be720b5c, 0c0b20587b9f25a2ad14db7f80ebe49bdf29920a to before da02a1824884d6c84c5e5b5ac373b0c9e3288ec2, 36933de59f67029e5739a98393891f9b94f27e0f, d886b4292a1c5b4facdb2dfdc31f0fecc71df898, 4c9ba0fed125deba8416b995b0c274b0804c0c24, ea0053af5dab4d63a9c44563973fb2f3bfd9eb2b, 5.4.195 to before 5.4.302, 5.10.117 to before 5.10.247, 5.15.41 to before 5.15.197, 4.9.315 to before 4.10, 4.14.280 to before 4.15, 4.19.244 to before 4.20, 5.17.9 to before 5.18
Linux
Linux · 5.18
Linux
Component: Not specified by the source
File: drivers/s390/net/ctcm_mpc.c
Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40254
Affected technology
Linux · b2d0f5d5dc53532e6f07bc546a476a55ebdfe0f3 to before 3415faa1fcb4150f29a72c5ecf959339d797feb7, b2d0f5d5dc53532e6f07bc546a476a55ebdfe0f3 to before 3d2e7d3b28469081ccf08301df07cc411a1cc5e9, b2d0f5d5dc53532e6f07bc546a476a55ebdfe0f3 to before f95bef5ba0b88d971b02c776f24bd17544930a3a, b2d0f5d5dc53532e6f07bc546a476a55ebdfe0f3 to before 87d2429381ddcf8cbd30c8c36793a4f7916d5f99, b2d0f5d5dc53532e6f07bc546a476a55ebdfe0f3 to before 0b903f33c31c82b1c3591279fd8a23893802b987, b2d0f5d5dc53532e6f07bc546a476a55ebdfe0f3 to before 9c61d8fe1350b7322f4953318165d6719c3b1475, b2d0f5d5dc53532e6f07bc546a476a55ebdfe0f3 to before 4689ba45296dbb3a47e70a1bc2ed0328263e48f3, b2d0f5d5dc53532e6f07bc546a476a55ebdfe0f3 to before dfe28c4167a9259fc0c372d9f9473e1ac95cff67
Linux
Linux · 4.15
Linux
RUGGEDCOM RST2428P · 0 to before V4.0
Siemens
Component: Not specified by the source
Function: that
File: net/openvswitch/actions.c, net/openvswitch/flow_netlink.c, net/openvswitch/flow_netlink.h
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40257
Affected technology
Linux · 00cfd77b9063dcdf3628a7087faba60de85a9cc8 to before 9be29f8e7ce4e147e56caac2c3a0ce3573cf9c17, 00cfd77b9063dcdf3628a7087faba60de85a9cc8 to before e2d1ad207174a7cd7903dd27a00db4b2dfa6c64b, 00cfd77b9063dcdf3628a7087faba60de85a9cc8 to before 385ddc0f008f24d1e7d03be998b3a98a37bd29ff, 00cfd77b9063dcdf3628a7087faba60de85a9cc8 to before c602cc344b4b8d41515fec3ffa98457ac963ee12, 00cfd77b9063dcdf3628a7087faba60de85a9cc8 to before 6d3275d4ca62e2c02e1b7e8cd32db59df91c14b7, 00cfd77b9063dcdf3628a7087faba60de85a9cc8 to before bbbd75346c8e6490b19c2ba90f38ea66ccf352b2, 00cfd77b9063dcdf3628a7087faba60de85a9cc8 to before 426358d9be7ce3518966422f87b96f1bad27295f
Linux
Linux · 5.10
Linux
RUGGEDCOM RST2428P · 0 to before V4.0
Siemens
Component: Not specified by the source
File: net/mptcp/pm.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40258
Affected technology
Linux · 3b1d6210a9577369103330b0d802b0bf74b65e7f to before f865e6595acf33083168db76921e66ace8bf0e5b, 3b1d6210a9577369103330b0d802b0bf74b65e7f to before 99908e2d601236842d705d5fd04fb349577316f5, 3b1d6210a9577369103330b0d802b0bf74b65e7f to before db4f7968a75250ca6c4ed70d0a78beabb2dcee18, 3b1d6210a9577369103330b0d802b0bf74b65e7f to before 8f9ba1a99a89feef9b5867c15a0141a97e893309, 3b1d6210a9577369103330b0d802b0bf74b65e7f to before ac28dfddedf6f209190950fc71bcff65ec4ab47b, 3b1d6210a9577369103330b0d802b0bf74b65e7f to before 3fc7723ed01d1130d4bf7063c50e0af60ecccbb4, 3b1d6210a9577369103330b0d802b0bf74b65e7f to before 035bca3f017ee9dea3a5a756e77a6f7138cc6eea
Linux
Linux · 5.7
Linux
RUGGEDCOM RST2428P · 0 to before V4.0
Siemens
Component: Not specified by the source
File: net/mptcp/protocol.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40259
Affected technology
Linux · 97d27b0dd015e980ade63fda111fd1353276e28b to before 11eeee00c94d770d4e45364060b5f1526dfe567b, 97d27b0dd015e980ade63fda111fd1353276e28b to before db6ac8703ab2b473e1ec845f57f6dd961a388d9f, 97d27b0dd015e980ade63fda111fd1353276e28b to before 109afbd88ecc46b6cc7551367222387e97999765, 97d27b0dd015e980ade63fda111fd1353276e28b to before 3dfd520c3b4ffe69e0630c580717d40447ab842f, 97d27b0dd015e980ade63fda111fd1353276e28b to before b343cee5df7e750d9033fba33e96fc4399fa88a5, 97d27b0dd015e980ade63fda111fd1353276e28b to before b2c0340cfa25c5c1f65e8590cc1a2dc97d14ef0f, 97d27b0dd015e980ade63fda111fd1353276e28b to before 6983d8375c040bb449d2187f4a57a20de01244fe, 97d27b0dd015e980ade63fda111fd1353276e28b to before 90449f2d1e1f020835cba5417234636937dd657e, 8d1f3b474a89b42f957ba3bae959dd3cd16531ca, fa55ef3f803fc7c20be0ab809e6278c31febd875, 6af37613289cfd32516ada47e444b48a638829c8, 4a8e8e0af9a520a685e0ab2d489327d5220d7ce2, ae9b6ae2e77947534e255903627cc62746ea77e2, 3.16.85 to before 3.17, 3.18.101 to before 3.19, 4.1.52 to before 4.2, 4.4.123 to before 4.5, 4.9.89 to before 4.10
Linux
Linux · 4.12
Linux
Component: Not specified by the source
Function: may
File: drivers/scsi/sg.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · No privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40261
Affected technology
Linux · f1cd8c40936ff2b560e1f35159dd6a4602b558e5 to before 3f48cd7f35da07fc067cef926bb7f6f4735de37b, 19fce0470f05031e6af36e49ce222d0f0050d432 to before a9b1315ed428239612601e9e188329e7cefa32fd, 19fce0470f05031e6af36e49ce222d0f0050d432 to before 9610a2c162ef729a3988213a4604376e492f6f44, 19fce0470f05031e6af36e49ce222d0f0050d432 to before 33f64600a12055219bda38b55320c62cdeda9167, 19fce0470f05031e6af36e49ce222d0f0050d432 to before 48ae433c6cc6985f647b1b37d8bb002972cf9bdb, 19fce0470f05031e6af36e49ce222d0f0050d432 to before fbd5741a556eaaa63d0908132ca79d335b58b1cd, 19fce0470f05031e6af36e49ce222d0f0050d432 to before 0a2c5495b6d1ecb0fa18ef6631450f391a888256, 5.10.9 to before 5.10.253
Linux
Linux · 5.11
Linux
RUGGEDCOM RST2428P · 0 to before V4.0
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: drivers/nvme/host/fc.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40262
Affected technology
Linux · 768062fd1284529212daffd360314e9aa93abb62 to before 3e96803b169dc948847f0fc2bae729a80914eb7b, 768062fd1284529212daffd360314e9aa93abb62 to before 4ce5218b101205b3425099fe3df88a61b58f9cc2, 768062fd1284529212daffd360314e9aa93abb62 to before a155292c3ce722036014da5477ee0e4c87b5e6b3, 768062fd1284529212daffd360314e9aa93abb62 to before ca9a08de9b294422376f47ade323d69590dbc6f2, 768062fd1284529212daffd360314e9aa93abb62 to before 56881294915a6e866d31a46f9bcb5e19167cfbaa, 768062fd1284529212daffd360314e9aa93abb62 to before 6524a15d33951b18ac408ebbcb9c16e14e21c336, 768062fd1284529212daffd360314e9aa93abb62 to before d83f1512758f4ef6fc5e83219fe7eeeb6b428ea4
Linux
Linux · 5.8
Linux
RUGGEDCOM RST2428P · 0 to before V4.0
Siemens
Component: Not specified by the source
File: drivers/input/keyboard/imx_sc_key.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40263
Affected technology
Linux · ca1eadbfcd36bec73f2a2111c28e8c7e9e8ae6c0 to before d74864291cb8bd784d44d1d02e87109cf88666bb, ca1eadbfcd36bec73f2a2111c28e8c7e9e8ae6c0 to before 9cf59f4724a9ee06ebb06c76b8678ac322e850b7, ca1eadbfcd36bec73f2a2111c28e8c7e9e8ae6c0 to before 6d81068685154535af06163eb585d6d9663ec7ec, ca1eadbfcd36bec73f2a2111c28e8c7e9e8ae6c0 to before 2d251c15c27e2dd16d6318425d2f7260cbd47d39, ca1eadbfcd36bec73f2a2111c28e8c7e9e8ae6c0 to before e08969c4d65ac31297fcb4d31d4808c789152f68
Linux
Linux · 5.19
Linux
RUGGEDCOM RST2428P · 0 to before V4.0
Siemens
Component: Not specified by the source
File: drivers/input/keyboard/cros_ec_keyb.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40264
Affected technology
Linux · 760c295e0e8d982917d004c9095cff61c0cbd803 to before 48d59b60dd5d7e4c48c077a2008c9dcd7b59bdfe, 760c295e0e8d982917d004c9095cff61c0cbd803 to before f499dfa5c98e92e72dd454eb95a1000a448f3405, 760c295e0e8d982917d004c9095cff61c0cbd803 to before 630360c6724e27f1aa494ba3fffe1e38c4205284, 760c295e0e8d982917d004c9095cff61c0cbd803 to before 012ee5882b1830db469194466a210768ed207388, 760c295e0e8d982917d004c9095cff61c0cbd803 to before ce0a3699244aca3acb659f143c9cb1327b210f89, 760c295e0e8d982917d004c9095cff61c0cbd803 to before 1ecd86ec6efddb59a10c927e8e679f183bb9113e, 760c295e0e8d982917d004c9095cff61c0cbd803 to before 4c4741f6e7f2fa4e1486cb61e1c15b9236ec134d, 760c295e0e8d982917d004c9095cff61c0cbd803 to before 7d277a7a58578dd62fd546ddaef459ec24ccae36
Linux
Linux · 4.2
Linux
RUGGEDCOM RST2428P · 0 to before V4.0
Siemens
Component: Not specified by the source
File: drivers/net/ethernet/emulex/benet/be_main.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40269
Affected technology
Linux · 02c56650f3c118d3752122996d96173d26bb13aa to before 480a1490c595a242f27493a4544b3efb21b29f6a, 5ef30e443e6d3654cccecec99cf481a69a0a6d3b to before ab0b5e92fc36ee82c1bd01fe896d0f775ed5de41, 99703c921864a318e3e8aae74fde071b1ff35bea to before 282aba56713bbc58155716b55ca7222b2d9cf3c8, 2d50acd7dbd0682a56968ad9551341d7fc5b6eaf to before c4dc012b027c9eb101583011089dea14d744e314, aba41867dd66939d336fdf604e4d73b805d8039f to before e0ed5a36fb3ab9e7b9ee45cd17f09f6d5f594360, d288dc74f8cf95cb7ae0aaf245b7128627a49bf3 to before d67dde02049e632ba58d3c44a164a74b6a737154, f0bd62b64016508938df9babe47f65c2c727d25c to before 6a5da3fa80affc948923f20a4e086177f505e86e, f0bd62b64016508938df9babe47f65c2c727d25c to before 217d47255a2ec8b246f2725f5db9ac3f1d4109d7, f0bd62b64016508938df9babe47f65c2c727d25c to before ef592bf2232a2daa9fffa8881881fc9957ea56e9, f0bd62b64016508938df9babe47f65c2c727d25c to before ece3b981bb6620e47fac826a2156c090b1a936a0, f0bd62b64016508938df9babe47f65c2c727d25c to before 98e9d5e33bda8db875cc1a4fe99c192658e45ab6, f0bd62b64016508938df9babe47f65c2c727d25c to before d2c04f20ccc6c0d219e6d3038bab45bc66a178ad, f0bd62b64016508938df9babe47f65c2c727d25c to before 05a1fc5efdd8560f34a3af39c9cf1e1526cc3ddf, 4.4.229 to before 4.4.230, 4.9.229 to before 4.9.230, 4.14.186 to before 4.14.188, 4.19.130 to before 4.19.132, 5.4.49 to before 5.4.51, 5.7.6 to before 5.7.8
Linux
Linux · 5.8
Linux
Component: Not specified by the source
File: sound/usb/endpoint.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40271
Affected technology
Linux · 710585d4922fd315f2cada8fbe550ae8ed23e994 to before 1d1596d68a6f11d28f677eedf6cf5b17dbfeb491, 710585d4922fd315f2cada8fbe550ae8ed23e994 to before c81d0385500446efe48c305bbb83d47f2ae23a50, 710585d4922fd315f2cada8fbe550ae8ed23e994 to before 4cba73c4c89219beef7685a47374bf88b1022369, 710585d4922fd315f2cada8fbe550ae8ed23e994 to before 6f2482745e510ae1dacc9b090194b9c5f918d774, 710585d4922fd315f2cada8fbe550ae8ed23e994 to before 67272c11f379d9aa5e0f6b16286b9d89b3f76046, 710585d4922fd315f2cada8fbe550ae8ed23e994 to before 623bb26127fb581a741e880e1e1a47d79aecb6f8, 710585d4922fd315f2cada8fbe550ae8ed23e994 to before 03de7ff197a3d0e17d0d5c58fdac99a63cba8110, 710585d4922fd315f2cada8fbe550ae8ed23e994 to before 895b4c0c79b092d732544011c3cecaf7322c36a1
Linux
Linux · 3.19
Linux
RUGGEDCOM RST2428P · 0 to before V4.0
Siemens
Component: Not specified by the source
File: fs/proc/generic.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40272
Affected technology
Linux · 1507f51255c9ff07d75909a84e7c0d7f3c4b2f49 to before bb1c19636aedae39360e6fdbcaef4f2bcff25785, 1507f51255c9ff07d75909a84e7c0d7f3c4b2f49 to before 1e4643d6628edf9c0047b1f8f5bc574665025acb, 1507f51255c9ff07d75909a84e7c0d7f3c4b2f49 to before 42d486d35a4143cc37fc72ee66edc99d942dd367, 1507f51255c9ff07d75909a84e7c0d7f3c4b2f49 to before 52f2d5cf33de9a8f5e72bbb0ed38282ae0bc4649, 1507f51255c9ff07d75909a84e7c0d7f3c4b2f49 to before 4444767e625da46009fc94a453fd1967b80ba047, 1507f51255c9ff07d75909a84e7c0d7f3c4b2f49 to before 6f86d0534fddfbd08687fa0f01479d4226bc3c3d
Linux
Linux · 5.14
Linux
Component: Not specified by the source
File: mm/secretmem.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40273
Affected technology
Linux · 624322f1adc58acd0b69f77a6ddc764207e97241 to before 935a2dc8928670bb2c37e21025331e61ec48ccf4, 624322f1adc58acd0b69f77a6ddc764207e97241 to before b114996a095da39e38410a0328d4a8aca8c36088, 624322f1adc58acd0b69f77a6ddc764207e97241 to before 839f56f626723f36904764858467e7a3881b975d, 624322f1adc58acd0b69f77a6ddc764207e97241 to before 29fbb3ad4018ca2b0988fbac76f4c694cc6d7e66, 624322f1adc58acd0b69f77a6ddc764207e97241 to before d7be15a634aa3874827d0d3ea47452ee878b8df7, 624322f1adc58acd0b69f77a6ddc764207e97241 to before f67ad9b33b0e6f00d2acc67cbf9cfa5c756be5fb, 624322f1adc58acd0b69f77a6ddc764207e97241 to before 4aa17144d5abc3c756883e3a010246f0dba8b468
Linux
Linux · 5.6
Linux
Component: Not specified by the source
File: fs/nfsd/nfs4state.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40275
Affected technology
Linux · 17156f23e93c0f59e06dd2aaffd06221341caaee to before 23aea9c74aeea2625aaf4fbcc6beb9d09e30f9e4, 17156f23e93c0f59e06dd2aaffd06221341caaee to before c5c08965ab96b16361e69a1e2a0e89dbcb99b5a6, 17156f23e93c0f59e06dd2aaffd06221341caaee to before 9f282104627be5fbded3102ff9004f753c55a063, 17156f23e93c0f59e06dd2aaffd06221341caaee to before 2762d3ea9c929ca4094541ca517c317ffa94625b, 17156f23e93c0f59e06dd2aaffd06221341caaee to before 57f607c112966c21240c424b33e2cb71e121dcf0, 17156f23e93c0f59e06dd2aaffd06221341caaee to before cbdbfc756f2990942138ed0138da9303b4dbf9ff, 17156f23e93c0f59e06dd2aaffd06221341caaee to before 85568535893600024d7d8794f4f8b6428b521e0c, 17156f23e93c0f59e06dd2aaffd06221341caaee to before 632108ec072ad64c8c83db6e16a7efee29ebfb74
Linux
Linux · 4.18
Linux
Component: Not specified by the source
File: sound/usb/mixer.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40277
Affected technology
Linux · 8ce75f8ab9044fe11caaaf2b2c82471023212f9f to before e58559845021c3bad5e094219378b869157fad53, 8ce75f8ab9044fe11caaaf2b2c82471023212f9f to before 54d458b244893e47bda52ec3943fdfbc8d7d068b, 8ce75f8ab9044fe11caaaf2b2c82471023212f9f to before 709e5c088f9c99a5cf2c1d1c6ce58f2cca7ab173, 8ce75f8ab9044fe11caaaf2b2c82471023212f9f to before a3abb54c27b2c393c44362399777ad2f6e1ff17e, 8ce75f8ab9044fe11caaaf2b2c82471023212f9f to before b5df9e06eed3df6a4f5c6f8453013b0cabb927b4, 8ce75f8ab9044fe11caaaf2b2c82471023212f9f to before 5aea2cde03d4247cdcf53f9ab7d0747c9dca1cfc, 8ce75f8ab9044fe11caaaf2b2c82471023212f9f to before f3f3a8eb3f0ba799fae057091d8c67cca12d6fa0, 8ce75f8ab9044fe11caaaf2b2c82471023212f9f to before 32b415a9dc2c212e809b7ebc2b14bc3fbda2b9af
Linux
Linux · 4.3
Linux
Component: Not specified by the source
File: drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40278
Affected technology
Linux · ef6980b6becb1afd9d82a4f043749a10ae81bf14 to before 918e063304f945fb93be9bb70cacea07d0b730ea, ef6980b6becb1afd9d82a4f043749a10ae81bf14 to before 5e3644ef147bf7140259dfa4cace680c9b26fe8b, ef6980b6becb1afd9d82a4f043749a10ae81bf14 to before 37f0680887c5aeba9a433fe04b35169010568bb1, ef6980b6becb1afd9d82a4f043749a10ae81bf14 to before 2191662058443e0bcc28d11694293d8339af6dde, ef6980b6becb1afd9d82a4f043749a10ae81bf14 to before a676a296af65d33725bdf7396803180957dbd92e, ef6980b6becb1afd9d82a4f043749a10ae81bf14 to before d1dbbbe839647486c9b893e5011fe84a052962df, ef6980b6becb1afd9d82a4f043749a10ae81bf14 to before c8f51dad94cbb88054e2aacc272b3ce1ed11fb1e, ef6980b6becb1afd9d82a4f043749a10ae81bf14 to before ce50039be49eea9b4cd8873ca6eccded1b4a130a
Linux
Linux · 4.6
Linux
RUGGEDCOM RST2428P · 0 to before V4.0
Siemens
Component: Not specified by the source
File: net/sched/act_ife.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality impact as high; integrity and availability impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40279
Affected technology
Linux · 22a5dc0e5e3e8fef804230cd73ed7b0afd4c7bae to before 218b67c8c8246d47a2a7910eae80abe4861fe2b7, 22a5dc0e5e3e8fef804230cd73ed7b0afd4c7bae to before 73cc56c608c209d3d666cc571293b090a471da70, 22a5dc0e5e3e8fef804230cd73ed7b0afd4c7bae to before 31e4aa93e2e5b5647fc235b0f6ee329646878f9e, 22a5dc0e5e3e8fef804230cd73ed7b0afd4c7bae to before 51cb05d4fd632596816ba44e882e84db9fb28a7e, 22a5dc0e5e3e8fef804230cd73ed7b0afd4c7bae to before 25837889ec062f2b7618142cd80253dff3da5343, 22a5dc0e5e3e8fef804230cd73ed7b0afd4c7bae to before 62b656e43eaeae445a39cd8021a4f47065af4389
Linux
Linux · 4.0
Linux
Component: Not specified by the source
File: net/sched/act_connmark.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality impact as high; integrity and availability impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40280
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40281
Affected technology
Linux · b58537a1f5629bdc98a8b9dc2051ce0e952f6b4b to before 0e0413e3315199b23ff4aec295e256034cd0a6e4, b58537a1f5629bdc98a8b9dc2051ce0e952f6b4b to before 834e65be429c0fa4f9bb5945064bd57f18ed2187, b58537a1f5629bdc98a8b9dc2051ce0e952f6b4b to before abb086b9a95d0ed3b757ee59964ba3c4e4b2fc1a, b58537a1f5629bdc98a8b9dc2051ce0e952f6b4b to before d0d858652834dcf531342c82a0428170aa7c2675, b58537a1f5629bdc98a8b9dc2051ce0e952f6b4b to before ed71f801249d2350c77a73dca2c03918a15a62fe, b58537a1f5629bdc98a8b9dc2051ce0e952f6b4b to before 1cfa4eac275cc4875755c1303d48a4ddfe507ca8, b58537a1f5629bdc98a8b9dc2051ce0e952f6b4b to before aaba523dd7b6106526c24b1fd9b5fc35e5aaa88d, b58537a1f5629bdc98a8b9dc2051ce0e952f6b4b to before 1534ff77757e44bcc4b98d0196bc5c0052fce5fa
Linux
Linux · 3.16
Linux
RUGGEDCOM RST2428P · 0 to before V4.0
Siemens
Component: Not specified by the source
File: net/sctp/transport.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40282
Affected technology
Linux · 18722c247023035b9e2e2a08a887adec2a9a6e49 to before ea46a1d217bc82e01cf3d0424e50ebfe251e34bf, 18722c247023035b9e2e2a08a887adec2a9a6e49 to before 973e0271754c77db3e1b6b69adf2de85a79a4c8b, 18722c247023035b9e2e2a08a887adec2a9a6e49 to before d566e9a2bfc848941b091ffd5f4e12c4e889d818, 18722c247023035b9e2e2a08a887adec2a9a6e49 to before 4ebb90c3c309e6375dc3e841af92e2a039843e62, 18722c247023035b9e2e2a08a887adec2a9a6e49 to before c24ac6cfe4f9a47180a65592c47e7a310d2f9d93, 18722c247023035b9e2e2a08a887adec2a9a6e49 to before 11cd7e068381666f842ad41d1cc58eecd0c75237, 18722c247023035b9e2e2a08a887adec2a9a6e49 to before 70d84e7c3a44b81020a3c3d650a64c63593405bd, 18722c247023035b9e2e2a08a887adec2a9a6e49 to before 3b78f50918276ab28fb22eac9aa49401ac436a3b
Linux
Linux · 3.14
Linux
Component: Not specified by the source
File: net/bluetooth/6lowpan.c
Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40283
Affected technology
Linux · fd913ef7ce619467c6b0644af48ba1fec499c623 to before 297dbf87989e09af98f81f2bcb938041785557e8, fd913ef7ce619467c6b0644af48ba1fec499c623 to before f858f004bc343a7ae9f2533bbb2a3ab27428532f, fd913ef7ce619467c6b0644af48ba1fec499c623 to before 7a6d1e740220ff9dfcb6a8c994d6ba49e76db198, fd913ef7ce619467c6b0644af48ba1fec499c623 to before 5dc00065a0496c36694afe11e52a5bc64524a9b8, fd913ef7ce619467c6b0644af48ba1fec499c623 to before 1c28c1e1522c773a94e26950ffb145e88cd9834b, fd913ef7ce619467c6b0644af48ba1fec499c623 to before 95b9b98c93b1c0916a3d4cf4540b7f5d69145a0d, fd913ef7ce619467c6b0644af48ba1fec499c623 to before a2610ecd9fd5708be8997ca8f033e4200c0bb6af, fd913ef7ce619467c6b0644af48ba1fec499c623 to before 23d22f2f71768034d6ef86168213843fc49bf550
Linux
Linux · 4.11
Linux
Component: Not specified by the source
File: drivers/bluetooth/btusb.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40304
Affected technology
Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 996bfaa7372d6718b6d860bdf78f6618e850c702, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f0982400648a3e00580253e0c48e991f34d2684c, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1943b69e87b0ab35032d47de0a7fca9a3d1d6fc1, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ebc0730b490c7f27340b1222e01dd106e820320d, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 86df8ade88d290725554cefd03101ecd0fbd3752, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 15ba9acafb0517f8359ca30002c189a68ddbb939, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2d1359e11674ed4274934eac8a71877ae5ae7bbb, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 3637d34b35b287ab830e66048841ace404382b67
Linux
Linux · 2.6.12
Linux
Component: Not specified by the source
File: drivers/video/fbdev/core/bitblit.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40306
Affected technology
Linux · f7ab093f74bf638ed98fd1115f3efa17e308bb7f to before c6564ff6b53c9a8dc786b6f1c51ae7688273f931, f7ab093f74bf638ed98fd1115f3efa17e308bb7f to before ef892d2bf4f3fa2c8de1677dd307e678bdd3d865, f7ab093f74bf638ed98fd1115f3efa17e308bb7f to before 15afebb9597449c444801d1ff0b8d8b311f950ab, f7ab093f74bf638ed98fd1115f3efa17e308bb7f to before bc812574de633cf9a9ad6974490e45f6a4bb5126, f7ab093f74bf638ed98fd1115f3efa17e308bb7f to before e09a096104fc65859422817fb2211f35855983fe, f7ab093f74bf638ed98fd1115f3efa17e308bb7f to before 9127d1e90c90e5960c8bc72a4ce2c209691a7021, f7ab093f74bf638ed98fd1115f3efa17e308bb7f to before c2ca015ac109fd743fdde27933d59dc5ad46658e, f7ab093f74bf638ed98fd1115f3efa17e308bb7f to before 025e880759c279ec64d0f754fe65bf45961da864
Linux
Linux · 4.6
Linux
Component: Not specified by the source
File: fs/orangefs/xattr.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40308
Affected technology
Linux · 48effdb7a798232db945503cf3f51e0be8070cea to before 39a7d40314b6288cfa2d13269275e9247a7a055a, 45fa7bd82c6178f4fec0ab94891144a043ec5fe8 to before 164586725b47f9d61912e6bf17dbaffeff11710b, d71a57a34ab6bbc95dc461158403c02e8ff3f912 to before b65ca9708bfbf47d8b7bd44b7c574bd16798e9c9, 9cf7dccaa7f4c56d2089700e5cb11f85a8d5f6cf to before 8b892dbef3887dbe9afdc7176d1a5fd90e1636aa, 806464634e7fc6b523160defeeddb1ade2a72f81 to before 799cd62cbcc3f12ee04b33ef390ff7d41c37d671, 6b7a32fa9bacdebd98c18b2a56994116995ee643 to before b420a4c7f915fc1c94ad1f6ca740acc046d94334, 366ceff495f902182d42b6f41525c2474caf3f9a to before 55c1519fca830f59a10bbf9aa8209c87b06cf7bc, 366ceff495f902182d42b6f41525c2474caf3f9a to before ca94b2b036c22556c3a66f1b80f490882deef7a6, 15543b7bbe7b5f744fdbb44f75b14f81a0117813, a4b89a45b12b69bc82c8137346b150a118e02c26, 5.4.293 to before 5.4.302, 5.10.237 to before 5.10.247, 5.15.181 to before 5.15.197, 6.1.135 to before 6.1.159, 6.6.88 to before 6.6.117, 6.12.24 to before 6.12.58, 6.13.12 to before 6.14, 6.14.3 to before 6.15
Linux
Linux · 6.15
Linux
Component: Not specified by the source
File: drivers/bluetooth/hci_bcsp.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40309
Affected technology
Linux · e6720779ae612a14ac4ba7fe4fd5b27d900d932c to before 391f83547b7b2c63e4b572ab838e10a06cfa4425, e6720779ae612a14ac4ba7fe4fd5b27d900d932c to before ecb9a843be4d6fd710d7026e359f21015a062572
Linux
Linux · 6.13
Linux
Component: Not specified by the source
File: net/bluetooth/sco.c
Attack conditions (Source advisory, CVSS 3.1): Adjacent network · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 8.0/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40312
Affected technology
Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 19cce65709a8a2966203653028d9004e28e85bd5, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before fabc1348bb8fe6bc80850014ee94bd89945f7f4d, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 46c76cfa17d1828c1a889cb54cb11d5ef3dfbc0f, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2870a7dec49ccdc3f6ae35da8f5d6737f21133a8, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ce054a366c54992185c9514e489a14f145b10c29, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1795277a4e98d82e6451544d43695540cee042ea, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8d6a9cbd276b3b85da0e7e98208f89416fed9265, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7a5aa54fba2bd591b22b9b624e6baa9037276986
Linux
Linux · 2.6.12
Linux
Component: Not specified by the source
File: fs/jfs/inode.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality impact as none; integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40313
Affected technology
Linux · 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e to before 63eb6730ce0604d3eacf036c2f68ea70b068317c, 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e to before 78d46f5276ed3589aaaa435580068c5b62efc921, 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e to before 17249b2a65274f73ed68bcd1604e08a60fd8a278, 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e to before 37f65e68ba9852dc51c78dbb54a9881c3f0fe4f7, 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e to before 57534db1bbc4ca772393bb7d92e69d5e7b9051cf, 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e to before 4e8011ffec79717e5fdac43a7e79faf811a384b7
Linux
Linux · 5.15
Linux
Component: Not specified by the source
File: fs/ntfs3/inode.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40314
Affected technology
Linux · 8bc1901ca7b07d864fca11461b3875b31f949765 to before 0cf9a50af91fbdac3849f8d950e883a3eaa3ecea, 8bc1901ca7b07d864fca11461b3875b31f949765 to before 37158ce6ba964b62d1e3eebd11f03c6900a52dd1, 8bc1901ca7b07d864fca11461b3875b31f949765 to before ea37884097a0931abb8e11e40eacfb25e9fdb5e9, 8bc1901ca7b07d864fca11461b3875b31f949765 to before 9c52f01429c377a2d32cafc977465f37b5384f77, 8bc1901ca7b07d864fca11461b3875b31f949765 to before fdf573c517627a96f5040f988e9b21267806be5c, 8bc1901ca7b07d864fca11461b3875b31f949765 to before 87c5ff5615dc0a37167e8faf3adeeddc6f1344a3
Linux
Linux · 5.3
Linux
Component: Not specified by the source
File: drivers/usb/cdns3/cdnsp-gadget.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
A local attacker with low privileges can trigger a use-after-free error. Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as high. The description does not state a further attacker outcome.
CVE-2025-40315
Affected technology
Linux · c9fc422c9a43e3d58d246334a71f3390401781dc to before b00d2572c16e8e59e979960d3383c2ae9cebd195, 0042178a69eb77a979e36a50dcce9794a3140ef8 to before 1c0dbd240be3f87cac321b14e17979b7e9cb6a8f, 72a8aee863af099d4434314c4536d6c9a61dcf3c to before 9ec40fba7357df2d36f4c2e2f3b9b1a4fba0a272, ebe2b1add1055b903e2acd86b290a85297edc0b3 to before c53e90563bc148e4e0ad09fe130ba2246d426ea6, ebe2b1add1055b903e2acd86b290a85297edc0b3 to before fc1141a530dfc91f0ee19b7f422a2d24829584bc, ebe2b1add1055b903e2acd86b290a85297edc0b3 to before d62b808d5c68a931ad0849a00a5e3be3dd7e0019, ebe2b1add1055b903e2acd86b290a85297edc0b3 to before 30880e9df27332403dd638a82c27921134b3630b, ebe2b1add1055b903e2acd86b290a85297edc0b3 to before cfd6f1a7b42f62523c96d9703ef32b0dbc495ba4, 32048f4be071f9a6966744243f1786f45bb22dc2, cfe5f6fd335d882bcc829a1c8a7d462a455c626e, 3e078b18753669615301d946297bafd69294ad2c, 5.4.180 to before 5.4.302, 5.10.101 to before 5.10.247, 5.15.24 to before 5.15.197, 4.14.267 to before 4.15, 4.19.230 to before 4.20, 5.16.10 to before 5.17
Linux
Linux · 5.17
Linux
Component: Not specified by the source
Function: is, to
File: drivers/usb/gadget/function/f_fs.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40317
Affected technology
Linux · 7d6f7fb053ad543da74119df3c4cd7bb46220471 to before c0f05129e5734ff3fd14b2c242709314d9ca5433, 7d6f7fb053ad543da74119df3c4cd7bb46220471 to before 02d3041caaa3fe4dd69e5a8afd1ac6b918ddc6a1, 7d6f7fb053ad543da74119df3c4cd7bb46220471 to before d979639f099c6e51f06ce4dd8d8e56364d6c17ba, 7d6f7fb053ad543da74119df3c4cd7bb46220471 to before 8143e4075d131c528540417a51966f6697be14eb, 7d6f7fb053ad543da74119df3c4cd7bb46220471 to before 2664bfd8969d1c43dcbe3ea313f130dfa6b74f4c, 7d6f7fb053ad543da74119df3c4cd7bb46220471 to before a16e92f8d7dc7371e68f17a9926cb92d2244be7b, 7d6f7fb053ad543da74119df3c4cd7bb46220471 to before b65f3303349eaee333e47d2a99045aa12fa0c3a7, 7d6f7fb053ad543da74119df3c4cd7bb46220471 to before 434f7349a1f00618a620b316f091bd13a12bc8d2
Linux
Linux · 4.16
Linux
Component: Not specified by the source
File: drivers/base/regmap/regmap-slimbus.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40319
Affected technology
Linux · 457f44363a8894135c85b7a9afd2bd8196db24ab to before 47626748a2a00068dbbd5836d19076637b4e235b, 457f44363a8894135c85b7a9afd2bd8196db24ab to before de2ce6b14bc3e565708a39bdba3ef9162aeffc72, 457f44363a8894135c85b7a9afd2bd8196db24ab to before e1828c7a8d8135e21ff6adaaa9458c32aae13b11, 457f44363a8894135c85b7a9afd2bd8196db24ab to before 6451141103547f4efd774e912418a3b4318046c6, 457f44363a8894135c85b7a9afd2bd8196db24ab to before 10ca3b2eec384628bc9f5d8190aed9427ad2dde6, 457f44363a8894135c85b7a9afd2bd8196db24ab to before 430e15544f11f8de26b2b5109c7152f71b78295e, 457f44363a8894135c85b7a9afd2bd8196db24ab to before 4e9077638301816a7d73fa1e1b4c1db4a7e3b59c
Linux
Linux · 5.8
Linux
Component: Not specified by the source
File: kernel/bpf/ringbuf.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40321
Affected technology
Linux · 18e2f61db3b708e0a22ccc403cb6ab2203d6faab to before c863b9c7b4e9af0b7931cb791ec91971a50f1a25, 18e2f61db3b708e0a22ccc403cb6ab2203d6faab to before e1fc9afcce9139791260f962541282d47fbb508d, 18e2f61db3b708e0a22ccc403cb6ab2203d6faab to before 55f60a72a178909ece4e32987e4c642ba57e1cf4, 18e2f61db3b708e0a22ccc403cb6ab2203d6faab to before c2b0f8d3e7358c33d90f0e62765d474f25f26a45, 18e2f61db3b708e0a22ccc403cb6ab2203d6faab to before 64e3175d1c8a3bea02032e7c9d1befd5f43786fa, 18e2f61db3b708e0a22ccc403cb6ab2203d6faab to before a6eed58249e7d60f856900e682992300f770f64b, 18e2f61db3b708e0a22ccc403cb6ab2203d6faab to before dbc7357b6aae686d9404e1dd7e2e6cf92c3a1b5a, 18e2f61db3b708e0a22ccc403cb6ab2203d6faab to before 3776c685ebe5f43e9060af06872661de55e80b9a
Linux
Linux · 3.9
Linux
Component: Not specified by the source
File: drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c, drivers/net/wireless/broadcom/brcm80211/brcmfmac/p2p.c, drivers/net/wireless/broadcom/brcm80211/brcmfmac/p2p.h
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Adjacent network · No privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40322
Affected technology
Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a10cede006f9614b465cf25609a8753efbfd45cc, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 0998a6cb232674408a03e8561dc15aa266b2f53b, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before db5c9a162d2f42bcc842b76b3d935dcc050a0eec, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c12003bf91fdff381c55ef54fef3e961a5af2545, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 9ba1a7802ca9a2590cef95b253e6526f4364477f, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 901f44227072be60812fe8083e83e1533c04eed1, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before efaf89a75a29b2d179bf4fe63ca62852e93ad620, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 18c4ef4e765a798b47980555ed665d78b71aeadf
Linux
Linux · 2.6.12
Linux
Component: Not specified by the source
File: drivers/video/fbdev/core/bitblit.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40324
Affected technology
Linux · 65a33135e91e6dd661ecdf1194b9d90c49ae3570 to before 930cb4fe3ab4061be31f20ee30bb72a66f7bb6d1, b11d8162c24af4a351d21e2c804d25ca493305e3 to before 375fdd8993cecc48afa359728a6e70b280dde1c8, b623a8e5d38a69a3ef8644acb1030dd7c7bc28b3 to before 2ac46606b2cc49e78d8e3d8f2685e79e9ba73020, 15a8b55dbb1ba154d82627547c5761cac884d810 to before 03524ccff698d4a77d096ed529073d91f5edee5d, 15a8b55dbb1ba154d82627547c5761cac884d810 to before a4948875ed0599c037dc438c11891c9012721b1d, 15a8b55dbb1ba154d82627547c5761cac884d810 to before 8f244b773c63fa480c9a3bd1ae04f5272f285e89, 15a8b55dbb1ba154d82627547c5761cac884d810 to before abb1f08a2121dd270193746e43b2a9373db9ad84, 3d0dcada384af22dec764c8374a2997870ec86ae, 5.10.220 to before 5.10.247, 5.15.154 to before 5.15.197, 6.1.24 to before 6.1.159, 6.2.11 to before 6.3
Linux
Linux · 6.3
Linux
Component: Not specified by the source
File: fs/nfsd/nfs4proc.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40331
Affected technology
Linux · 8f840e47f190cbe61a96945c13e9551048d42cef to before b106a68df0650b694b254427cd9250c04500edd3, 8f840e47f190cbe61a96945c13e9551048d42cef to before 3006959371007fc2eae4a078f823c680fa52de1a, 8f840e47f190cbe61a96945c13e9551048d42cef to before 72e3fea68eac8d088e44c3dd954e843478e9240e, 8f840e47f190cbe61a96945c13e9551048d42cef to before 584307275b2048991b2e8984962189b6cc0a9b85, 8f840e47f190cbe61a96945c13e9551048d42cef to before c9119f243d9c0da3c3b5f577a328de3e7ffd1b42, 8f840e47f190cbe61a96945c13e9551048d42cef to before 2fe08fcaacb7eb019fa9c81db39b2214de216677, 8f840e47f190cbe61a96945c13e9551048d42cef to before 89eac1e150dbd42963e13d23828cb8c4e0763196, 8f840e47f190cbe61a96945c13e9551048d42cef to before 95aef86ab231f047bb8085c70666059b58f53c09
Linux
Linux · 4.7
Linux
Component: Not specified by the source
File: net/sctp/diag.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40342
Affected technology
Linux · e399441de9115cd472b8ace6c517708273ca7997 to before de3d91af47bc015031e7721b100a29989f6498a5, e399441de9115cd472b8ace6c517708273ca7997 to before e8cde03de8674b05f2c5e0870729049eba517800, e399441de9115cd472b8ace6c517708273ca7997 to before 4253e0a4546138a2bf9cb6acf66b32fee677fc7c, e399441de9115cd472b8ace6c517708273ca7997 to before 25f4bf1f7979a7871974fd36c79d69ff1cf4b446, e399441de9115cd472b8ace6c517708273ca7997 to before 9950af4303942081dc8c7a5fdc3688c17c7eb6c0, e399441de9115cd472b8ace6c517708273ca7997 to before a2f7fa75c4a2a07328fa22ccbef461db76790b55, e399441de9115cd472b8ace6c517708273ca7997 to before 891cdbb162ccdb079cd5228ae43bdeebce8597ad
Linux
Linux · 4.10
Linux
Component: Not specified by the source
File: drivers/nvme/host/fc.c
Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40343
Affected technology
Linux · a07b4970f464f13640e28e16dad6cfa33647cc99 to before 2f4852db87e25d4e226b25cb6f652fef9504360e, a07b4970f464f13640e28e16dad6cfa33647cc99 to before 85e2ce1920cb511d57aae59f0df6ff85b28bf04d, a07b4970f464f13640e28e16dad6cfa33647cc99 to before 601ed47b2363c24d948d7bac0c23abc8bd459570, a07b4970f464f13640e28e16dad6cfa33647cc99 to before 04d17540ef51e2c291eb863ca87fd332259b2d40, a07b4970f464f13640e28e16dad6cfa33647cc99 to before c09ac9a63fc3aaf4670ad7b5e4f5afd764424154, a07b4970f464f13640e28e16dad6cfa33647cc99 to before f2537be4f8421f6495edfa0bc284d722f253841d
Linux
Linux · 4.8
Linux
Component: Not specified by the source
File: drivers/nvme/target/fc.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40345
Affected technology
Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d00a6c04a502cd52425dbf35588732c652b16490, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 26e9b5da3231da7dc357b363883b5b7b51a64092, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before aa64e0e17e3a5991a25e6a46007770c629039869, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 04a8a6393f3f2f471e05eacca33282dd30b01432, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a20f1dd19d21dcb70140ea5a71b1f8cbe0c7e68f, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 5ebe8d479aaf4f41ac35e6955332304193c646f6, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b59d4fda7e7d0aff1043a7f742487cb829f5aac1
Linux
Linux · 2.6.12
Linux
RUGGEDCOM RST2428P · 0 to before V4.0
Siemens
Component: Not specified by the source
File: drivers/usb/storage/sddr55.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality impact as low; integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40346
Affected technology
Linux · b8fe128dad8f97cc9af7c55a264d1fc5ab677195 to before 64da320252e43456cc9ec3055ff567f168467b37, b8fe128dad8f97cc9af7c55a264d1fc5ab677195 to before 02fbea0864fd4a863671f5d418129258d7159f68, b8fe128dad8f97cc9af7c55a264d1fc5ab677195 to before a77f8434954cb1e9c42c3854e40855fdcf5ab235, b8fe128dad8f97cc9af7c55a264d1fc5ab677195 to before 3373f263bb647fcc3b5237cfaef757633b9ee25e, b8fe128dad8f97cc9af7c55a264d1fc5ab677195 to before 45379303124487db3a81219af7565d41f498167f, b8fe128dad8f97cc9af7c55a264d1fc5ab677195 to before 3a01b2614e84361aa222f67bc628593987e5cdb2, b8fe128dad8f97cc9af7c55a264d1fc5ab677195 to before 2eead19334516c8e9927c11b448fbe512b1f18a1
Linux
Linux · 5.7
Linux
Component: Not specified by the source
File: drivers/base/arch_topology.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-40349
Affected technology
Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f7d9f600c7c3ff5dab36181a388af55f2c95604c, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 40dfe7a4215a1f20842561ffaf5a6f83a987e75b, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 418e48cab99c52c1760636a4dbe464bf6db2018b, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 0058d20d76182861dbdd8fd6e2dd8d18d6d3becf, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 4f40a2b3969daf10dca4dea6f6dd0e813f79b227, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 17ed51cfce6c62cffb97059ef392ad2e0245806e, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 068a46df3e6acc68fb9db0a6313ab379a11ecd6f, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 738d5a51864ed8d7a68600b8c0c63fe6fe5c4f20
Linux
Linux · 2.6.12
Linux
Component: Not specified by the source
File: fs/hfsplus/bnode.c, fs/hfsplus/btree.c, fs/hfsplus/hfsplus_fs.h
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-40351
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-40360
Affected technology
Linux · b715650220311e50448cb499c71084ca8aeeeece to before 6abeff03cb79a2c7f4554a8e8738acd35bb37152, b715650220311e50448cb499c71084ca8aeeeece to before c4faf7f417eea8b8d5cc570a1015736f307aa2d5, b715650220311e50448cb499c71084ca8aeeeece to before b61ed8005bd3102510fab5015ac6a275c9c5ea16, b715650220311e50448cb499c71084ca8aeeeece to before 6bdef5648a60e49d4a3b02461ab7ae3776877e77, b715650220311e50448cb499c71084ca8aeeeece to before c7d5e69866bbe95c1e4ab4c10a81e0a02d9ea232, b715650220311e50448cb499c71084ca8aeeeece to before 14e02ed3876f4ab0ed6d3f41972175f8b8df3d70
Linux
Linux · 5.15
Linux
Component: Not specified by the source
File: drivers/gpu/drm/drm_gem_atomic_helper.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-40363
Affected technology
Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2da805a61ef5272a2773775ce14c3650adb84248, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 9bf27de51bd6db5ff827780ec0eba55de230ba45, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 0bf756ae1e69fec5e6332c37830488315d6d771b, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 75b16b2755e12999ad850756ddfb88ad4bfc7186, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f28dde240160f3c48a50d641d210ed6a3b9596ed, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c14cf41094136691c92ef756872570645d61f4a1, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b056f971bd72b373b7ae2025a8f3bd18f69653d3, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2327a3d6f65ce2fe2634546dde4a25ef52296fec
Linux
Linux · 2.6.12
Linux
Component: Not specified by the source
File: net/ipv6/ah6.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-68168
Affected technology
Linux · 2a8807f9f511c64de0c7cc9900a1683e3d72a3e5 to before d6af7fce2e162ac68e85d3a11eb6ac8c35b24b64, 5c094ca994824e038b6a97835ded4e5d1d808504 to before 8cae9cf23e0bd424ac904e753639a587543ce03a, 2febd5f81e4bfba61d9f374dcca628aff374cc56 to before a2aa97cde9857f881920635a2e3d3b11769619c5, aa7cdf487ab3fa47284daaccc3d7d5de01c6a84c to before d2dd7ca05a11685c314e62802a55e8d67a90e974, 95e2b352c03b0a86c5717ba1d24ea20969abcacc to before 2a9575a372182ca075070b3cd77490dcf0c951e7, 95e2b352c03b0a86c5717ba1d24ea20969abcacc to before cbf2f527ae4ca7c7dabce42e85e8deb58588a37e, 95e2b352c03b0a86c5717ba1d24ea20969abcacc to before 038861414ab383b41dd35abbf9ff0ef715592d53, 95e2b352c03b0a86c5717ba1d24ea20969abcacc to before 300b072df72694ea330c4c673c035253e07827b8, a88efca805bea93cea9187dfd00835aa7093bf1b, 97c1f26e4d4af55e8584e4646dd5c5fa7baf62c7, b0ed8ed0428ee96092da6fefa5cfacbe4abed701, 5.4.255 to before 5.4.302, 5.10.192 to before 5.10.247, 5.15.123 to before 5.15.197, 6.1.42 to before 6.1.159, 4.14.324 to before 4.15, 4.19.293 to before 4.20, 6.4.7 to before 6.5
Linux
Linux · 6.5
Linux
Component: Not specified by the source
File: fs/jfs/jfs_txnmgr.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68176
Affected technology
Linux · 40d957e6f9eb3a8a585007b8b730340c829afbdb to before d5dbe92ac8a4ca6226093241f95f9cb1b0d2e0e1, 40d957e6f9eb3a8a585007b8b730340c829afbdb to before eb3d29ca0820fa3d7cccad47d2da56c9ab5469ed, 40d957e6f9eb3a8a585007b8b730340c829afbdb to before 0d0bb756f002810d249caee51f3f1c309f3cdab5, 40d957e6f9eb3a8a585007b8b730340c829afbdb to before 1810b2fd7375de88a74976dcd402b29088e479ed, 40d957e6f9eb3a8a585007b8b730340c829afbdb to before 953eb3796ef06b8ea3bf6bdde14156255bc75866, 40d957e6f9eb3a8a585007b8b730340c829afbdb to before 363448d069e29685ca37a118065121e486387af3, 40d957e6f9eb3a8a585007b8b730340c829afbdb to before 49a6c160ad4812476f8ae1a8f4ed6d15adfa6c09
Linux
Linux · 5.9
Linux
Component: Not specified by the source
File: drivers/pci/controller/cadence/pcie-cadence-host.c, drivers/pci/controller/cadence/pcie-cadence.c, drivers/pci/controller/cadence/pcie-cadence.h
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-68177
Affected technology
Linux · b43a7ffbf33be7e4d3b10b7714ee663ea2c52fe2 to before b02352dd2e6cca98777714cc2a27553191df70db, b43a7ffbf33be7e4d3b10b7714ee663ea2c52fe2 to before 956b56d17a89775e4957bbddefa45cd3c6c71000, b43a7ffbf33be7e4d3b10b7714ee663ea2c52fe2 to before 55cf586b9556863e3c2a45460aba71bcb2be5bcd, b43a7ffbf33be7e4d3b10b7714ee663ea2c52fe2 to before fd93e1d71b3b14443092919be12b1abf08de35eb, b43a7ffbf33be7e4d3b10b7714ee663ea2c52fe2 to before 8d6791c480f22d6e9a566eaa77336d3d37c5c591, b43a7ffbf33be7e4d3b10b7714ee663ea2c52fe2 to before 64adabb6d9d51b7e7c02fe733346a2c4dd738488, b43a7ffbf33be7e4d3b10b7714ee663ea2c52fe2 to before 809cf2a7794ca4c14c304b349f4c3ae220701ce4, b43a7ffbf33be7e4d3b10b7714ee663ea2c52fe2 to before 592532a77b736b5153e0c2e4c74aa50af0a352ab
Linux
Linux · 3.10
Linux
Component: Not specified by the source
File: drivers/cpufreq/longhaul.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-68185
Affected technology
Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6025f641a0e30afdc5aa62017397b1860ad9f677, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before e6cafe71eb3b5579b245ba1bd528a181e77f3df1, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before fa4daf7d11e45b72aad5d943a7ab991f869fff79, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 504b3fb9948a9e96ebbabdee0d33966a8bab15cb, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before eacfd08b26a062f1095b18719715bc82ad35312e, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 40be5b9080114f18b0cea386db415b68a7273c1a, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f5e570eaab36a110c6ffda32b87c51170990c2d1, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a890a2e339b929dbd843328f9a92a1625404fe63
Linux
Linux · 2.6.12
Linux
Component: Not specified by the source
File: fs/nfs/nfs4proc.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-68191
Affected technology
Linux · cc4e3835eff474aa274d6e1d18f69d9d296d3b76 to before 087f1ed450dc6e7e49ffbbbe5b78be1218c6d5e0, cc4e3835eff474aa274d6e1d18f69d9d296d3b76 to before 45e4e4a8772fa1c5f6f38e82b732b3a9d8137af4, cc4e3835eff474aa274d6e1d18f69d9d296d3b76 to before 7758ec35ff3e9a31558eda4f0f9eb0ddfa78a8ba, cc4e3835eff474aa274d6e1d18f69d9d296d3b76 to before c018a87942bf1607aeebf8dba5a210ca9a09a0fd, cc4e3835eff474aa274d6e1d18f69d9d296d3b76 to before 51b3033088f0420b19027e3d54cd989b6ebd987e, cc4e3835eff474aa274d6e1d18f69d9d296d3b76 to before 3c3b148bf8384c8a787753cf20abde1c5731f97f, cc4e3835eff474aa274d6e1d18f69d9d296d3b76 to before dc2f650f7e6857bf384069c1a56b2937a1ee370d
Linux
Linux · 5.9
Linux
Component: Not specified by the source
File: net/ipv4/udp_tunnel_nic.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-68192
Affected technology
Linux · c6adf77953bcec0ad63d7782479452464e50f7a3 to before d693c47fb902b988f5752182e4f7fbde5e6dcaf9, c6adf77953bcec0ad63d7782479452464e50f7a3 to before 0aabccdcec1f4a36f95829ea2263f845bbc77223, c6adf77953bcec0ad63d7782479452464e50f7a3 to before 4e6b9004f01d0fef5b19778399bc5bf55f8c2d71, c6adf77953bcec0ad63d7782479452464e50f7a3 to before bf527b80b80a282ab5bf1540546211fc35e5cd42, c6adf77953bcec0ad63d7782479452464e50f7a3 to before dd03780c29f87c26c0e0bb7e0db528c8109461fb, c6adf77953bcec0ad63d7782479452464e50f7a3 to before ae811175cea35b03ac6d7c910f43a82a43b9c3b3, c6adf77953bcec0ad63d7782479452464e50f7a3 to before 8ab3b8f958d861a7f725a5be60769106509fbd69, c6adf77953bcec0ad63d7782479452464e50f7a3 to before e120f46768d98151ece8756ebd688b0e43dc8b29
Linux
Linux · 4.12
Linux
Component: Not specified by the source
File: drivers/net/usb/qmi_wwan.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68194
Affected technology
Linux · 21677cfc562a27e099719d413287bc8d1d24deb7 to before 519737af11c03590819a6eec2ad532cfdb87ea63, 21677cfc562a27e099719d413287bc8d1d24deb7 to before f58ab83b7b7133e6baefe03a46846c4f6ce45e2f, 21677cfc562a27e099719d413287bc8d1d24deb7 to before 26f6a1dd5d81ad61a875a747698da6f27abf389b, 21677cfc562a27e099719d413287bc8d1d24deb7 to before 667afd4681781f60a644cd0d2ee6c59cb1c36208, 21677cfc562a27e099719d413287bc8d1d24deb7 to before 8231e80118463be5598daaf266c1c83650f1948b, 21677cfc562a27e099719d413287bc8d1d24deb7 to before 0213e4175abbb9dfcbf7c197e3817d527f459ad5, 21677cfc562a27e099719d413287bc8d1d24deb7 to before f7f3ecb4934fff782fa9bb1cd16e2290c041b22d, 21677cfc562a27e099719d413287bc8d1d24deb7 to before eecd203ada43a4693ce6fdd3a58ae10c7819252c
Linux
Linux · 2.6.35
Linux
Component: Not specified by the source
File: drivers/media/rc/imon.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-68200
Affected technology
Linux · 0d76daf2013ce1da20eab5e26bd81d983e1c18fb to before c4cdd143c35974a2cedd000fa9eb3accc3023b20, ec624fe740b416fb68d536b37fb8eef46f90b5c2 to before 5e149d8a8e732126fb6014efd60075cf63a73f91, ec624fe740b416fb68d536b37fb8eef46f90b5c2 to before baa61dcaa50b7141048c8d2aede7fe9ed8f21d11, ec624fe740b416fb68d536b37fb8eef46f90b5c2 to before 6392e5f4b1a3cce10e828309baf35d22abd3457d, ec624fe740b416fb68d536b37fb8eef46f90b5c2 to before 8dd2fe5f5d586c8e87307b7a271f6b994afcc006, ec624fe740b416fb68d536b37fb8eef46f90b5c2 to before 4ef92743625818932b9c320152b58274c05e5053, 5.15.13 to before 5.15.197
Linux
Linux · 5.16
Linux
Component: Not specified by the source
File: include/linux/filter.h, net/sched/act_bpf.c, net/sched/cls_bpf.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-68204
Affected technology
Linux · 898216c97ed2ebfffda659ce12388da43534de6c to before 18249a167ffd91b4b4fbd92afd4ddcbf3af81f35, 898216c97ed2ebfffda659ce12388da43534de6c to before c6e11d320fd6cbaef6d589f2fcb45aa25a6b960a, 898216c97ed2ebfffda659ce12388da43534de6c to before 582f48d22eb5676fe7be3589b986ddd29f7bf4d1, 898216c97ed2ebfffda659ce12388da43534de6c to before 7f569197f7ad09319af960bd7e43109de5c67c04, 898216c97ed2ebfffda659ce12388da43534de6c to before ad120c08b89a81d41d091490bbe150343473b659, 898216c97ed2ebfffda659ce12388da43534de6c to before 921b090841ae7a08b19ab14495bdf8636dc31e21, 898216c97ed2ebfffda659ce12388da43534de6c to before 983e91da82ec3e331600108f9be3ea61236f5c75, 898216c97ed2ebfffda659ce12388da43534de6c to before 7458f72cc28f9eb0de811effcb5376d0ec19094a
Linux
Linux · 4.17
Linux
Component: Not specified by the source
File: drivers/pmdomain/arm/scmi_pm_domain.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · No privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68211
Affected technology
linux kernel · from 2.6.32 (inclusive), before 5.10.249 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.161 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.121 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.59 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.17.9 (exclusive)
linux
linux kernel · 6.18 · update rc1
linux
linux kernel · 6.18 · update rc2
linux
linux kernel · 6.18 · update rc3
linux
linux kernel · 6.18 · update rc4
linux
linux kernel · 6.18 · update rc5
linux
Linux · 31dbd01f314364b70c2e026a5793a29a4da8a9dc to before 220cb3e425e17587f560335924cba9f16a842c64, 31dbd01f314364b70c2e026a5793a29a4da8a9dc to before 10644e8839544dd5699c03c8fb1aeeefc41602fd, 31dbd01f314364b70c2e026a5793a29a4da8a9dc to before 67137b715b7db28d82e4ed07a7092c2fa6ba7adb, 31dbd01f314364b70c2e026a5793a29a4da8a9dc to before 9c2f8a9b68024e5ebb4813665845ec0a95f2eac3, 31dbd01f314364b70c2e026a5793a29a4da8a9dc to before 74f78421c925b6d17695566f0c5941de57fd44b3, 31dbd01f314364b70c2e026a5793a29a4da8a9dc to before f62973e0767e4fcd6799087787fca08ca2a85b8c, 31dbd01f314364b70c2e026a5793a29a4da8a9dc to before f5548c318d6520d4fa3c5ed6003eeb710763cbc5
Linux
Linux · 2.6.32
Linux
Component: Not specified by the source
Function: to
File: mm/ksm.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68217
Affected technology
Linux · 1afca2b66aac7ac262d3511c68725e9e7053b40f to before c4e746651bd74c38f581e1cf31651119a94de8cd, 1afca2b66aac7ac262d3511c68725e9e7053b40f to before 36bc92b838ff72f62f2c17751a9013b29ead2513, 1afca2b66aac7ac262d3511c68725e9e7053b40f to before 015b719962696b793997e8deefac019f816aca77, 1afca2b66aac7ac262d3511c68725e9e7053b40f to before 084264e10e2ae8938a54355123ad977eb9df56d6, 1afca2b66aac7ac262d3511c68725e9e7053b40f to before d344ea1baf1946c90f0cd6f9daeb5f3e0a0ca479, 1afca2b66aac7ac262d3511c68725e9e7053b40f to before 9ab67eff6d654e34ba6da07c64761aa87c2a3c26, 1afca2b66aac7ac262d3511c68725e9e7053b40f to before 763c3f4d2394a697d14af1335d3bb42f05c9409f, 1afca2b66aac7ac262d3511c68725e9e7053b40f to before 69aeb507312306f73495598a055293fa749d454e
Linux
Linux · 4.8
Linux
Component: Not specified by the source
Function: allocates, parses
File: drivers/input/tablet/pegasus_notetaker.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · No privileges required · No user interaction required
What an attacker can do
An attacker can use a malicious USB descriptor to force the allocation of a very small buffer. Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high.
CVE-2025-68220
Affected technology
Linux · 88139ed030583557751e279968e13e892ae10825 to before af6b10a13fc0aee37df4a8292414cc055c263fa3, 88139ed030583557751e279968e13e892ae10825 to before 8427218ecbd7f8559c37972e66cb0fa06e82353b, 88139ed030583557751e279968e13e892ae10825 to before 3afeb909c3e2e0eb19b1e20506196e5f2d9c2259, 88139ed030583557751e279968e13e892ae10825 to before 2572c358ee434ce4b994472cceeb4043cbff5bc5, 88139ed030583557751e279968e13e892ae10825 to before 952637c5b9be64539cd0e13ef88db71a1df46373, 88139ed030583557751e279968e13e892ae10825 to before fbb53727ca789a8d27052aab4b77ca9e2a0fae2b, 88139ed030583557751e279968e13e892ae10825 to before f9608637ecc165d7d6341df105aee44691461fb9, 88139ed030583557751e279968e13e892ae10825 to before 90a88306eb874fe4bbdd860e6c9787f5bbc588b5
Linux
Linux · 3.18
Linux
Component: Not specified by the source
Function: return
File: drivers/net/ethernet/ti/netcp_core.c, drivers/soc/ti/knav_dma.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · No privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68227
Affected technology
Linux · 0b4f33def7bbde1ce2fea05f116639270e7acdc7 to before 92c4092fe012ecdfa5fb05d394f1c1d8f91ad81c, 0b4f33def7bbde1ce2fea05f116639270e7acdc7 to before 7ee8f015eb47907745e2070184a8ab1e442ac3c4, 0b4f33def7bbde1ce2fea05f116639270e7acdc7 to before 344974ea1a3ca30e4920687b0091bda4438cebdb, 0b4f33def7bbde1ce2fea05f116639270e7acdc7 to before 037cc50589643342d69185b663ecf9d26cce91e8, 0b4f33def7bbde1ce2fea05f116639270e7acdc7 to before 9b1980b6f23fa30bf12add19f37c7458625099eb, 0b4f33def7bbde1ce2fea05f116639270e7acdc7 to before 1a0d5c74af9b6ba9ffdf1172de5a1a6df5922a00, 0b4f33def7bbde1ce2fea05f116639270e7acdc7 to before c77b3b79a92e3345aa1ee296180d1af4e7031f8f
Linux
Linux · 5.7
Linux
Component: Not specified by the source
File: net/mptcp/protocol.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68229
Affected technology
Linux · 2628b352c3d4905adf8129ea50900bd980b6ccef to before 63f511d3855f7f4b35dd63dbc58fc3d935a81268, 2628b352c3d4905adf8129ea50900bd980b6ccef to before 3d8c517f6eb27e47b1a198e05f8023038329b40b, 2628b352c3d4905adf8129ea50900bd980b6ccef to before f449a1edd7a13bb025aaf9342ea6f8bf92684bbf, 2628b352c3d4905adf8129ea50900bd980b6ccef to before 1c9ba455b5073253ceaadae4859546e38e8261fe, 2628b352c3d4905adf8129ea50900bd980b6ccef to before a6ef60898ddaf1414592ce3e5b0d94276d631663, 2628b352c3d4905adf8129ea50900bd980b6ccef to before 72e8831079266749a7023618a0de2f289a9dced6, 2628b352c3d4905adf8129ea50900bd980b6ccef to before 13aff3b8a7184281b134698704d6c06863a8361b, 2628b352c3d4905adf8129ea50900bd980b6ccef to before e6965188f84a7883e6a0d3448e86b0cf29b24dfc
Linux
Linux · 4.5
Linux
Component: Not specified by the source
File: drivers/target/loopback/tcm_loop.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68238
Affected technology
Linux · 0cae7c285f4771a9927ef592899234d307aea5d4 to before 2178b0255eae108bb10e5e99658b28641bc06f43, 099a316518508be7c57de4134ef919b2dea948ce to before 9c58c64ec41290c12490ca7e1df45013fbbb41fd, e630d32162a8aab92d4aaebae0a8d93039257593 to before e282a4fdf3c6ee842a720010a8b5f7d77bedd126, ad9393467fbd788ac2b8a01e492e45ab1b68a1b1 to before b146e0b085d9d6bfe838e0a15481cba7d093c67f, 0ce5416863965ddd86e066484a306867cf1e01a8 to before 0c635241a62f2f5da1b48bfffae226d1f86a76ef, d76d22b5096c5b05208fd982b153b3f182350b19 to before 0c2a43cb43786011b48eeab6093db14888258c6b, d76d22b5096c5b05208fd982b153b3f182350b19 to before 5c56bf214af85ca042bf97f8584aab2151035840, a33c7492dcdf804b705b6c21018a481414d48038, 5.10.235 to before 5.10.247, 5.15.179 to before 5.15.197, 6.1.130 to before 6.1.159, 6.6.80 to before 6.6.118, 6.12.17 to before 6.12.60, 6.13.5 to before 6.14
Linux
Linux · 6.14
Linux
Component: Not specified by the source
File: drivers/mtd/nand/raw/cadence-nand-controller.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-68241
Affected technology
Linux · e46e23c289f62ccd8e2230d9ce652072d777ff30 to before 69d35c12168f9c59b159ae566f77dfad9f96d7ca, 5867e20e1808acd0c832ddea2587e5ee49813874 to before 4b7210da22429765d19460d38c30eeca72656282, 67d6d681e15b578c1725bad8ad079e05d1c48a8e to before 298f1e0694ab4edb6092d66efed93c4554e6ced1, 67d6d681e15b578c1725bad8ad079e05d1c48a8e to before b8a44407bdaf2f0c5505cc7d9fc7d8da90cf9a94, 67d6d681e15b578c1725bad8ad079e05d1c48a8e to before 041ab9ca6e80d8f792bb69df28ebf1ef39c06af8, 67d6d681e15b578c1725bad8ad079e05d1c48a8e to before b84f083f50ecc736a95091691339a1b363962f0e, 67d6d681e15b578c1725bad8ad079e05d1c48a8e to before 0fd16ed6dc331636fb2a874c42d2f7d3156f7ff0, 67d6d681e15b578c1725bad8ad079e05d1c48a8e to before ac1499fcd40fe06479e9b933347b837ccabc2a40, bed8941fbdb72a61f6348c4deb0db69c4de87aca, f10ce783bcc4d8ea454563a7d56ae781640e7dcb, f484595be6b7ef9d095a32becabb5dae8204fb2a, 3e6bd2b583f18da9856fc9741ffa200a74a52cba, 5ae06218331f39ec45b5d039aa7cb3ddd4bb8008, 4589a12dcf80af31137ef202be1ff4a321707a73, 5.4.146 to before 5.4.302, 5.10.65 to before 5.10.247, 4.4.284 to before 4.5, 4.9.283 to before 4.10, 4.14.247 to before 4.15, 4.19.207 to before 4.20, 5.13.17 to before 5.14, 5.14.4 to before 5.15
Linux
Linux · 5.15
Linux
Component: Not specified by the source
File: net/ipv4/route.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68244
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-68245
Affected technology
Linux · efa95b01da18ad22af62f6d99a3243f3be8fd264 to before 8e6a50edad11e3e1426e4c29e7aa6201f3468ac2, efa95b01da18ad22af62f6d99a3243f3be8fd264 to before 9b0bb18b4b9dc017c1825a2c5e763615e34a1593, efa95b01da18ad22af62f6d99a3243f3be8fd264 to before 890472d6fbf062e6de7fdd56642cb305ab79d669, efa95b01da18ad22af62f6d99a3243f3be8fd264 to before 4afd4ebbad52aa146838ec23082ba393e426a2bb, efa95b01da18ad22af62f6d99a3243f3be8fd264 to before c645693180a98606c430825223d2029315d85e9d, efa95b01da18ad22af62f6d99a3243f3be8fd264 to before c79a6d9da29219616b118a3adce9a14cd30f9bd0, efa95b01da18ad22af62f6d99a3243f3be8fd264 to before 9a51b5ccd1c79afec1c03a4e1e6688da52597556, efa95b01da18ad22af62f6d99a3243f3be8fd264 to before 49c8d2c1f94cc2f4d1a108530d7ba52614b874c2
Linux
Linux · 3.17
Linux
Component: Not specified by the source
File: net/core/netpoll.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-68249
Affected technology
Linux · 97a6f772f36b7f52bcfa56a581bbd2470cffe23d to before 3509c748e79435d09e730673c8c100b7f0ebc87c, 97a6f772f36b7f52bcfa56a581bbd2470cffe23d to before ad2be44882716dc3589fbc5572cc13f88ead6b24, 97a6f772f36b7f52bcfa56a581bbd2470cffe23d to before c400410fe0580dd6118ae8d60287ac9ce71a65fd, 97a6f772f36b7f52bcfa56a581bbd2470cffe23d to before 6fb8fbc0aa542af5bf0fed94fa6b0edf18144f95, 97a6f772f36b7f52bcfa56a581bbd2470cffe23d to before 7d851f746067b8ee5bac9c262f326ace0a6ea253, 97a6f772f36b7f52bcfa56a581bbd2470cffe23d to before 4af0eedbdb4df7936bf43a28e31af232744d2620, 97a6f772f36b7f52bcfa56a581bbd2470cffe23d to before a8cc9e5fcb0e2eef21513a4fec888f5712cb8162
Linux
Linux · 5.9
Linux
Component: Not specified by the source
File: drivers/most/most_usb.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-68254
Affected technology
Linux · 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before c03cb111628924827351e19baa5b073e9b0d723d, 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before bb5940193d813449540d8d3a82abc045be41f48a, 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before c173ce97d3f0f0c0fefa39139d6d04ba60b5db22, 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before d1ab7f9cee22e7b8a528da9ac953e4193b96cda5, 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before 38292407c2bb5b2b3131aaace4ecc7a829b40b76, 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before bf323db1d883c209880bd92f3b12503e3531c3fc, 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before 502ddcc405b69fa92e0add6c1714d654504f6fd7
Linux
Linux · 4.12
Linux
Component: Not specified by the source
File: drivers/staging/rtl8723bs/core/rtw_mlme_ext.c
Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality impact as low; integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68255
Affected technology
Linux · 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before 49b7806851f93fd342838c93f4f765e0cc5029b0, 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before 4445adedae770037078803d1ce41f9e88a1944b6, 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before d129dc2a5d59b4d9cd2cc0b6eeb04df8461199f0, 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before 34620eb602aa432f090b2b784ee5c5070fb16cf9, 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before 61871c83259a511980ec2664964cecc69005398b, 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before 25411f5fcf5743131158f337c99c2bbf3f8477f5, 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before e841d8ea722315b781c4fc5bf4f7670fbca88875, 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before 6ef0e1c10455927867cac8f0ed6b49f328f8cf95
Linux
Linux · 4.12
Linux
Component: Not specified by the source
File: drivers/staging/rtl8723bs/core/rtw_mlme_ext.c
Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68257
Affected technology
Linux · 3fbfd2223a271426509830e6340c386a1054cfad to before 4836ba483a22ebd076c8faaf8293a7295fad4142, 3fbfd2223a271426509830e6340c386a1054cfad to before 7141915bf0c41cb57d83cdbaf695b8c731b16b71, 3fbfd2223a271426509830e6340c386a1054cfad to before f13895c03620933a58907e3250016f087e39b78c, 3fbfd2223a271426509830e6340c386a1054cfad to before b975f91de5f8f63cf490f0393775cc795f8b0557, 3fbfd2223a271426509830e6340c386a1054cfad to before f6e629dfe6f590091c662a87c9fcf118b1c1c7dc, 3fbfd2223a271426509830e6340c386a1054cfad to before 573b07d2e3d473ee7eb625ef87519922cf01168d, 3fbfd2223a271426509830e6340c386a1054cfad to before aac80e912de306815297a3b74f0426873ffa7dc3, 3fbfd2223a271426509830e6340c386a1054cfad to before 0de7d9cd07a2671fa6089173bccc0b2afe6b93ee
Linux
Linux · 5.8
Linux
Component: Not specified by the source
File: drivers/comedi/comedi_fops.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68258
Affected technology
Linux · 77e01cdbad5175f56027fd6fae00bd0fc175651a to before f9ff87aac7b37d462246c46d28912d382a8e2ea6, 77e01cdbad5175f56027fd6fae00bd0fc175651a to before 4cde9a7e025cc09b88097c70606f6b30c22880f4, 77e01cdbad5175f56027fd6fae00bd0fc175651a to before ad7ed3c9c7b8408e8612697bc43a5441fe386c71, 77e01cdbad5175f56027fd6fae00bd0fc175651a to before 049f14557450351750f929ebfff36d849511e132, 77e01cdbad5175f56027fd6fae00bd0fc175651a to before 8952bc1973cd54158c35e06bfb8c29ace7375a48, 77e01cdbad5175f56027fd6fae00bd0fc175651a to before 8dc2f02d3bada9247f00bfd2e5f61f68c389a0a3, 77e01cdbad5175f56027fd6fae00bd0fc175651a to before 543f4c380c2e1f35e60528df7cb54705cda7fee3, 77e01cdbad5175f56027fd6fae00bd0fc175651a to before f24c6e3a39fa355dabfb684c9ca82db579534e72
Linux
Linux · 2.6.30
Linux
Component: Not specified by the source
File: drivers/comedi/drivers/multiq3.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68261
Affected technology
Linux · c755e251357a0cee0679081f08c3f4ba797a8009 to before b322bac9f01d03190b5abc52be5d9dd9f22a2b41, c755e251357a0cee0679081f08c3f4ba797a8009 to before 61e03dc3794ebf77a706b85e5a36c9c6d70be6de, c755e251357a0cee0679081f08c3f4ba797a8009 to before 5b266cf6851ce72b11b067fe02adf5a8687104ad, c755e251357a0cee0679081f08c3f4ba797a8009 to before 144c48da33a01d92995aeccd8208eb47d2a8e659, c755e251357a0cee0679081f08c3f4ba797a8009 to before 22a76b0861ae61a299c8e126c1aca8c4fda820fd, c755e251357a0cee0679081f08c3f4ba797a8009 to before ba8aeff294ac7ff6dfe293663d815c54c5ee218c, c755e251357a0cee0679081f08c3f4ba797a8009 to before 5cad18e527ba8a9ca5463cc170073eeb5a4826f4, c755e251357a0cee0679081f08c3f4ba797a8009 to before 0cd8feea8777f8d9b9a862b89c688b049a5c8475, 3e96c3fdcfccb321a9e1623f78cc71b44593e965, 5781ac24bbd998ebb1ff30143bb06244d847af48, 9b06cce3ca4d60d442c39bfa7c058b71b1cee6c2, da1e40237f8f3516581b534c484c236a79ccfd14, 7cf6b709b6412afd1d93b2c4b37163c3602e3b95, 3.16.44 to before 3.17, 3.18.107 to before 3.19, 4.4.129 to before 4.5, 4.9.14 to before 4.10, 4.10.2 to before 4.11
Linux
Linux · 4.11
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
Function: ext4_destroy_inline_data_nolock
File: fs/ext4/inline.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68264
Affected technology
Linux · 67cf5b09a46f72e048501b84996f2f77bc42e947 to before 54ab81ae5f218452e64470cd8a8139bb5880fe2b, 67cf5b09a46f72e048501b84996f2f77bc42e947 to before 43bf001f0fe4e59bba47c897505222f959f4a1cc, 67cf5b09a46f72e048501b84996f2f77bc42e947 to before 89c2c41f0974e530b2d032c3695095aa0559adb1, 67cf5b09a46f72e048501b84996f2f77bc42e947 to before 1687a055a555347b002f406676a1aaae4668f242, 67cf5b09a46f72e048501b84996f2f77bc42e947 to before 210ac60a86a3ad2c76ae60e0dc71c34af6e7ea0b, 67cf5b09a46f72e048501b84996f2f77bc42e947 to before ca43ea29b4c4d2764aec8a26cffcfb677a871e6e, 67cf5b09a46f72e048501b84996f2f77bc42e947 to before 58df743faf21ceb1880f930aa5dd428e2a5e415d, 67cf5b09a46f72e048501b84996f2f77bc42e947 to before 892e1cf17555735e9d021ab036c36bc7b58b0e3b
Linux
Linux · 3.8
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: fs/ext4/inline.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68266
Affected technology
Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d0c5ec1f57d8fbb953f166a27d9d32473dc8f3e4, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before aeccd6743ee4fdd1ab8cfcbb5b9a20b613418f6d, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8f73336b75bd3457b6f9410f2a0601a238f32238, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a9f626396bfe66f49b743601e862767928237cc0, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 77899444d46162aeb65f229590c26ba266864223, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a8cb796e7e2cb7971311ba236922f5e7e1be77e6, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 34ab4c75588c07cca12884f2bf6b0347c7a13872
Linux
Linux · 2.6.12
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: fs/bfs/inode.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality impact as none; integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68282
Affected technology
Linux · 5702f75375aa9ecf8ad3431aef3fe6ce8c8dbd15 to before dddc944d65169b552e09cb54e3ed4fbb9ea26416, 5702f75375aa9ecf8ad3431aef3fe6ce8c8dbd15 to before eee16f3ff08e759ea828bdf7dc1c0ef2f22134f5, 5702f75375aa9ecf8ad3431aef3fe6ce8c8dbd15 to before c12a0c3ef815ddd67e47f9c819f9fe822fed5467, 5702f75375aa9ecf8ad3431aef3fe6ce8c8dbd15 to before f02a412c0a18f02f0f91b0a3d9788315a721b7fd, 5702f75375aa9ecf8ad3431aef3fe6ce8c8dbd15 to before 10014310193cf6736c1aeb4105c5f4a0818d0c65, 5702f75375aa9ecf8ad3431aef3fe6ce8c8dbd15 to before 3b32caa73d135eea8fb9cabb45e9fc64c5a3ecb9, 5702f75375aa9ecf8ad3431aef3fe6ce8c8dbd15 to before baeb66fbd4201d1c4325074e78b1f557dff89b5b
Linux
Linux · 3.12
Linux
Component: Not specified by the source
File: drivers/usb/gadget/udc/core.c, include/linux/usb/gadget.h
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
A local attacker with low privileges can trigger a use-after-free error. Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not state a further attacker outcome.
CVE-2025-68284
Affected technology
Linux · 285ea34fc876aa0a2c5e65d310c4a41269e2e5f2 to before f22c55a20a2d9ffbbac57408d5d488cef8201e9d, 285ea34fc876aa0a2c5e65d310c4a41269e2e5f2 to before 8dfcc56af28cffb8f25fb9be37b3acc61f2a3d09, 285ea34fc876aa0a2c5e65d310c4a41269e2e5f2 to before ccbccfba25e9aa395daaea156b5e7790910054c4, 285ea34fc876aa0a2c5e65d310c4a41269e2e5f2 to before 5ef575834ca99f719d7573cdece9df2fe2b72424, 285ea34fc876aa0a2c5e65d310c4a41269e2e5f2 to before 6920ff09bf911bc919cd7a6b7176fbdd1a6e6850, 285ea34fc876aa0a2c5e65d310c4a41269e2e5f2 to before 7fce830ecd0a0256590ee37eb65a39cbad3d64fc
Linux
Linux · 5.11
Linux
Component: Not specified by the source
File: net/ceph/auth_x.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68285
Affected technology
Linux · 6822d00b5462e7a9dfa11dcc60cc25823a2107c5 to before bb4910c5fd436701faf367e1b5476a5a6d2aff1c, 6822d00b5462e7a9dfa11dcc60cc25823a2107c5 to before 05ec43e9a9de67132dc8cd3b22afef001574947f, 6822d00b5462e7a9dfa11dcc60cc25823a2107c5 to before 7c8ccdc1714d9fabecd26e1be7db1771061acc6e, 6822d00b5462e7a9dfa11dcc60cc25823a2107c5 to before 183ad6e3b651e8fb0b66d6a2678f4b80bfbba092, 6822d00b5462e7a9dfa11dcc60cc25823a2107c5 to before e08021b3b56b2407f37b5fe47b654be80cc665fb, 6822d00b5462e7a9dfa11dcc60cc25823a2107c5 to before 3fc43120b22a3d4f1fbeff56a35ce2105b6a5683, 6822d00b5462e7a9dfa11dcc60cc25823a2107c5 to before 076381c261374c587700b3accf410bdd2dba334e
Linux
Linux · 2.6.35
Linux
Component: Not specified by the source
File: net/ceph/ceph_common.c, net/ceph/debugfs.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68286
Affected technology
Linux · 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 781f2f32e9c19eb791b52af283c96f9a9677a7f2, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 09092269cb762378ca8b56024746b1a136761e0d, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 109e9c92543f3105e8e1efd2c5e6b92ef55d5743, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 9d1a65cbe3ec5da3003c8434ac7a38dcdc958fd9, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before f7cf491cd5b54b5a093bd3fdf76fa2860a7522bf, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 62150f1e7ec707da76ff353fb7db51fef9cd6557, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 3ce62c189693e8ed7b3abe551802bbc67f3ace54
Linux
Linux · 4.15
Linux
Component: Not specified by the source
File: drivers/gpu/drm/amd/display/dc/core/dc_stream.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68287
Affected technology
Linux · 72246da40f3719af3bfd104a2365b32537c27d83 to before 467add9db13219101f14b6cc5477998b4aaa5fe2, 72246da40f3719af3bfd104a2365b32537c27d83 to before 67192e8cb7f941b5bba91e4bb290683576ce1607, 72246da40f3719af3bfd104a2365b32537c27d83 to before 47de14d741cc4057046c9e2f33df1f7828254e6c, 72246da40f3719af3bfd104a2365b32537c27d83 to before afc0e34f161ce61ad351303c46eb57bd44b8b090, 72246da40f3719af3bfd104a2365b32537c27d83 to before 7cfb62888eba292fa35cd9ddbd28ce595f60e139, 72246da40f3719af3bfd104a2365b32537c27d83 to before fa5eaf701e576880070b60922200557ae4aa54e1, 72246da40f3719af3bfd104a2365b32537c27d83 to before e4037689a366743c4233966f0e74bc455820d316
Linux
Linux · 3.2
Linux
Component: Not specified by the source
Function: unbind
File: drivers/usb/dwc3/ep0.c, drivers/usb/dwc3/gadget.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68288
Affected technology
Linux · a45b599ad808c3c982fdcdc12b0b8611c2f92824 to before 83f0241959831586d9b6d47f6bd5d3dec8f43bf0, a45b599ad808c3c982fdcdc12b0b8611c2f92824 to before 4ba515dfff7eeca369ab85cdbb3f3b231c71720c, a45b599ad808c3c982fdcdc12b0b8611c2f92824 to before 467fec3cefbeb9e3ea80f457da9a5666a71ca0d0, a45b599ad808c3c982fdcdc12b0b8611c2f92824 to before cb1401b5bcc2feb5b038fc4b512e5968b016e05e, a45b599ad808c3c982fdcdc12b0b8611c2f92824 to before 0f18eac44c5668204bf6eebb01ddb369ac56932b, a45b599ad808c3c982fdcdc12b0b8611c2f92824 to before 5b815ddb3f5560fac35b16de3a2a22d5f81c5993, a45b599ad808c3c982fdcdc12b0b8611c2f92824 to before 41e99fe2005182139b1058db71f0d241f8f0078c, 582802e7c617cfb07cc15f280c128e6decbc57b8, 58b7ce6f9ef2367f86384b20458642945993b816, 93314640426ddb6af618d0802e622f6fa771792c, ad2518320bc440ed3db072e2444a1bb226a9cf7a, d827bea2d18c07ba514f7d48cde49f90da9a1384, 39169410574503c6e901de1aa6eac5108475e017, 3.16.58 to before 3.17, 3.18.110 to before 3.19, 4.4.133 to before 4.5, 4.9.103 to before 4.10, 4.14.44 to before 4.15, 4.16.12 to before 4.17
Linux
Linux · 4.17
Linux
Component: Not specified by the source
File: drivers/usb/storage/transport.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68289
Affected technology
Linux · 3b545788505b2e2883aff13bdddeacaf88942a4f to before a9985a88b2fc29fbe1657fe8518908e261d6889c, 4249d6fbc10fd997abdf8a1ea49c0389a0edf706 to before 5a1628283cd9dccf1e44acfb74e77504f4dc7472, 4249d6fbc10fd997abdf8a1ea49c0389a0edf706 to before 0ac07e476944a5e4c2b8b087dd167dec248c1bdf, 4249d6fbc10fd997abdf8a1ea49c0389a0edf706 to before 41434488ca714ab15cb2a4d0378418d1be8052d2, 4249d6fbc10fd997abdf8a1ea49c0389a0edf706 to before e72c963177c708a167a7e17ed6c76320815157cf, 4249d6fbc10fd997abdf8a1ea49c0389a0edf706 to before 0dea2e0069a7e9aa034696f8065945b7be6dd6b7, 4249d6fbc10fd997abdf8a1ea49c0389a0edf706 to before e4f5ce990818d37930cd9fb0be29eee0553c59d9, d55a236f1bab102e353ea5abb7b7b6ff7e847294, 8e275d3d5915a8f7db3786e3f84534bb48245f4c, 3680a6ff9a9ccd3c664663da04bef2534397d591, d654be97e1b679616e3337b871a9ec8f31a88841, 8bdef7f21cb6e53c0ce3e1cbcb05975aa0dd0fe9, 77d7f071883cf2921a7547f82e41f15f7f860e35, a55093941e38113dd6f5f5d5d2705fec3018f332, 5.10.50 to before 5.10.247, 4.4.276 to before 4.5, 4.9.276 to before 4.10, 4.14.240 to before 4.15, 4.19.198 to before 4.20, 5.4.132 to before 5.5, 5.12.17 to before 5.13, 5.13.2 to before 5.14
Linux
Linux · 5.14
Linux
Component: Not specified by the source
File: drivers/usb/gadget/function/f_eem.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68290
Affected technology
Linux · 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c to before 90e6ce2b1b19fb8b9d4afee69f40e4c6a4791154, 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c to before a4c4118c2af284835b16431bbfe77e0130c06fef, 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c to before 0dece48660be16918ecf2dbdc7193e8be03e1693, 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c to before 993bfdc3842893c394de13c8200c338ebb979589, 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c to before 2274767dc02b756b25e3db1e31c0ed47c2a78442, 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c to before 8d8ffefe3d5d8b7b73efb866db61130107299c5c, 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c to before baadf2a5c26e802a46573eaad331b427b49aaa36
Linux
Linux · 5.6
Linux
Component: Not specified by the source
Function: which
File: drivers/most/most_usb.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68295
Affected technology
Linux · f2aee329a68f5a907bcff11a109dfe17c0b41aeb to before ff8f9bd1c46ee02d5558293915d42e82646d5ee9, f2aee329a68f5a907bcff11a109dfe17c0b41aeb to before d146e96fef876492979658dce644305de35878d4, f2aee329a68f5a907bcff11a109dfe17c0b41aeb to before 3dd546e867e94c2f954bca45a961b6104ba708b6, f2aee329a68f5a907bcff11a109dfe17c0b41aeb to before f62ffdfb431bdfa4b6d24233b7fd830eca0b801e, f2aee329a68f5a907bcff11a109dfe17c0b41aeb to before f15288c137d960836277d0e3ecc62de68e52f00f, f2aee329a68f5a907bcff11a109dfe17c0b41aeb to before a67e91d5f446e455dd9201cdd6e865f7078d251d, f2aee329a68f5a907bcff11a109dfe17c0b41aeb to before 3184b6a5a24ec9ee74087b2a550476f386df7dc2, 1456d3cea31114137fabf1110d20a2e2c6d6060f, 16764d7486d02b1699ae16e91d7a577602398b17, 904847402bd74a28164bd4d8da082d1eace7c190, 325fa2a6729b74b2806b31725940cb54658515e5, 8db988a982908b7bff76e095000adabf9c29698b, 4.4.194 to before 4.5, 4.9.194 to before 4.10, 4.14.146 to before 4.15, 4.19.75 to before 4.20, 5.2.17 to before 5.3
Linux
Linux · 5.3
Linux
Component: Not specified by the source
File: fs/smb/client/connect.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68301
Affected technology
Linux · cd66ab20a8f84474564a68fffffd37d998f6c340 to before 34147477eeab24077fcfe9649e282849347d760c, 948ddbdc56636773401f2cb9c7a932eb9c43ccfd to before b0c4d5135b04ea100988e2458c98f2d8564cda16, 6aecbba12b5c90b26dc062af3b9de8c4b3a2f19f to before 5d6051ea1b0417ae2f06a8440d22e48fbc8f8997, 6aecbba12b5c90b26dc062af3b9de8c4b3a2f19f to before 3be37c3c96b16462394fcb8e15e757c691377038, 6aecbba12b5c90b26dc062af3b9de8c4b3a2f19f to before 3fd2105e1b7e041cc24be151c9a31a14d5fc50ab, 6aecbba12b5c90b26dc062af3b9de8c4b3a2f19f to before 64e47cd1fd631a21bf5a630cebefec6c8fc381cd, 6aecbba12b5c90b26dc062af3b9de8c4b3a2f19f to before 5ffcb7b890f61541201461580bb6622ace405aec, dd4fb02847e737cc38ca75e708b1a836fba45faf, 5.10.118 to before 5.10.247, 5.15.42 to before 5.15.197, 5.17.10 to before 5.18
Linux
Linux · 5.18
Linux
Component: Not specified by the source
File: drivers/net/ethernet/aquantia/atlantic/aq_ring.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68302
Affected technology
Linux · 1edb9ca69e8a7988900fc0283e10550b5592164d to before ac171c3c755499c9f87fe30b920602255f8b5648, 1edb9ca69e8a7988900fc0283e10550b5592164d to before 18ef3ad1bb57dcf1a9ee61736039aedccf670b21, 1edb9ca69e8a7988900fc0283e10550b5592164d to before 46e5332126596a2ca791140feab18ce1fc1a3c86, 1edb9ca69e8a7988900fc0283e10550b5592164d to before 7fd789d6ea4915034eb6bcb72f6883c8151083e5, 1edb9ca69e8a7988900fc0283e10550b5592164d to before 45b5b4ddb8d6bea5fc1625ff6f163bbb125d49cc, 1edb9ca69e8a7988900fc0283e10550b5592164d to before 88f46c0be77bfe45830ac33102c75be7c34ac3f3, 1edb9ca69e8a7988900fc0283e10550b5592164d to before f5bce28f6b9125502abec4a67d68eabcd24b3b17
Linux
Linux · 3.15
Linux
Component: Not specified by the source
File: drivers/net/ethernet/samsung/sxgbe/sxgbe_main.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68303
Affected technology
Linux · fdca4f16f57da76a8e68047923588a87d1c01f0a to before 15d560cdf5b36c51fffec07ac2a983ab3bff4cb2, fdca4f16f57da76a8e68047923588a87d1c01f0a to before 46e9d6f54184573dae1dcbcf6685a572ba6f4480, fdca4f16f57da76a8e68047923588a87d1c01f0a to before 3e7442c5802146fd418ba3f68dcb9ca92b5cec83, fdca4f16f57da76a8e68047923588a87d1c01f0a to before a21615a4ac6fecbb586d59fe2206b63501021789, fdca4f16f57da76a8e68047923588a87d1c01f0a to before c2ee6d38996775a19bfdf20cb01a9b8698cb0baa, fdca4f16f57da76a8e68047923588a87d1c01f0a to before 9b9c0adbc3f8a524d291baccc9d0c04097fb4869
Linux
Linux · 4.5
Linux
Component: Not specified by the source
File: drivers/platform/x86/intel/punit_ipc.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68308
Affected technology
Linux · 7259124eac7d1b76b41c7a9cb2511a30556deebe to before 58343e0a4d43699f0e2f5b169384bbe4c0217add, 7259124eac7d1b76b41c7a9cb2511a30556deebe to before 69c7825df64e24dc15d31631a1fc9145324b1345, 7259124eac7d1b76b41c7a9cb2511a30556deebe to before 028e89c7e8b4346302e88df01cc50e0a1f05791a, 7259124eac7d1b76b41c7a9cb2511a30556deebe to before e9dd83a75a7274edef21682c823bf0b66d7b6b7f, 7259124eac7d1b76b41c7a9cb2511a30556deebe to before 0897cea266e39166a36111059ba147192b36592f, 7259124eac7d1b76b41c7a9cb2511a30556deebe to before bd8135a560cf6e64f0b98ed4daadf126a38f7f48, 7259124eac7d1b76b41c7a9cb2511a30556deebe to before 0c73772cd2b8cc108d5f5334de89ad648d89b9ec
Linux
Linux · 4.19
Linux
Component: Not specified by the source
Function: will, by
File: drivers/net/can/usb/kvaser_usb/kvaser_usb_leaf.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68312
Affected technology
Linux · 8b4588b8b00b299be16a35be67b331d8fdba03f3 to before 285d4b953f2ca03c358f986718dd89ee9bde632e, 135199a2edd459d2b123144efcd7f9bcd95128e4 to before 88a38b135d69f5db9024ff6527232f1b51be8915, 635fd8953e4309b54ca6a81bed1d4a87668694f4 to before 43005002b60ef3424719ecda16d124714b45da3b, a69e617e533edddf3fa3123149900f36e0a6dc74 to before 3a10619fdefd3051aeb14860e4d4335529b4e94d, a69e617e533edddf3fa3123149900f36e0a6dc74 to before 9a579d6a39513069d298eee70770bbac8a148565, a69e617e533edddf3fa3123149900f36e0a6dc74 to before 2ce1de32e05445d77fc056f6ff8339cfb78a5f84, a69e617e533edddf3fa3123149900f36e0a6dc74 to before 5158fb8da162e3982940f30cd01ed77bdf42c6fc, a69e617e533edddf3fa3123149900f36e0a6dc74 to before 420c84c330d1688b8c764479e5738bbdbf0a33de, d2d6b530d89b0a912148018027386aa049f0a309, e2a521a7dcc463c5017b4426ca0804e151faeff7, 7f77dcbc030c2faa6d8e8a594985eeb34018409e, d49bb8cf9bfaa06aa527eb30f1a52a071da2e32f, db3b738ae5f726204876f4303c49cfdf4311403f, 5.4.211 to before 5.4.302, 5.10.137 to before 5.10.247, 5.15.61 to before 5.15.197, 4.9.326 to before 4.10, 4.14.291 to before 4.15, 4.19.256 to before 4.20, 5.18.18 to before 5.19, 5.19.2 to before 5.20
Linux
Linux · 6.0
Linux
Component: Not specified by the source
File: drivers/net/usb/usbnet.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-68321
Affected technology
Linux · ff7d6b27f894f1469dc51ccb828b7363ccd9799f to before 0ec2cd5c58793d0c622797cd5fbe26634b357210, ff7d6b27f894f1469dc51ccb828b7363ccd9799f to before 9835a0fd59a1df5ec0740fdab6d50db68e0f10de, ff7d6b27f894f1469dc51ccb828b7363ccd9799f to before 7613c06ffa89c1e2266fb532e23ef7dfdf269d73, ff7d6b27f894f1469dc51ccb828b7363ccd9799f to before 3671a0775952026228ae44e096eb144bca75f8dc, ff7d6b27f894f1469dc51ccb828b7363ccd9799f to before ab48dc0e23eb714b3f233f8e8f6deed7df2051f5, ff7d6b27f894f1469dc51ccb828b7363ccd9799f to before f3b52167a0cb23b27414452fbc1278da2ee884fc
Linux
Linux · 4.18
Linux
Component: Not specified by the source
File: net/core/page_pool.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68325
Affected technology
Linux · de04ddd2980b48caa8d7e24a7db2742917a8b280 to before a3f4e3de41a3f115db35276c6b186ccbc913934a, 0dacfc5372e314d1219f03e64dde3ab495a5a25e to before 38abf6e931b169ea88d7529b49096f53a5dcf8fe, 710866fc0a64eafcb8bacd91bcb1329eb7e5035f to before fcb91be52eb6e92e00b533ebd7c77fecada537e1, aa12ee1c1bd260943fd6ab556d8635811c332eeb to before d01f0e072dadb02fe10f436b940dd957aff0d7d4, ff57186b2cc39766672c4c0332323933e5faaa88 to before 0b6216f9b3d1c33c76f74511026e5de5385ee520, 15de71d06a400f7fdc15bf377a2552b0ec437cf5 to before 529c284cc2815c8350860e9a31722050fe7117cb, 15de71d06a400f7fdc15bf377a2552b0ec437cf5 to before 3ed6c458530a547ed0c9ea0b02b19bab620be88b, 15de71d06a400f7fdc15bf377a2552b0ec437cf5 to before 9fefc78f7f02d71810776fdeb119a05a946a27cc, 7689ab22de36f8db19095f6bdf11f28cfde92f5c, 62d591dde4defb1333d202410609c4ddeae060b3, 5.10.241 to before 5.10.248, 5.15.190 to before 5.15.198, 6.1.149 to before 6.1.160, 6.6.103 to before 6.6.120, 6.12.44 to before 6.12.63, 5.4.297 to before 5.5, 6.16.4 to before 6.17
Linux
Linux · 6.17
Linux
Component: Not specified by the source
File: net/sched/sch_cake.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-68327
Affected technology
Linux · f1407d5c66240b33d11a7f1a41d55ccf6a9d7647 to before fd1a7bf3a8cac13f6d2d52d8c7570ba41621db9a, f1407d5c66240b33d11a7f1a41d55ccf6a9d7647 to before cd5e86e34c66a831b5cb9b720ad411a006962cc8, f1407d5c66240b33d11a7f1a41d55ccf6a9d7647 to before 230b1bc1310edcd5c1b71dcd6b77ccba43139cb5, f1407d5c66240b33d11a7f1a41d55ccf6a9d7647 to before 9d86bc8b188a77c8d6f7252280ec2bd24ad6fbc1, f1407d5c66240b33d11a7f1a41d55ccf6a9d7647 to before 26838f147aeaa8f820ff799d72815fba5e209bd9, f1407d5c66240b33d11a7f1a41d55ccf6a9d7647 to before aa658a6d5ac21c7cde54c6d015f2d4daff32e02d, f1407d5c66240b33d11a7f1a41d55ccf6a9d7647 to before eb9ac779830b2235847b72cb15cf07c7e3333c5e
Linux
Linux · 3.0
Linux
Component: Not specified by the source
File: drivers/usb/renesas_usbhs/common.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68328
Affected technology
Linux · b5dc75c915cdaebab9b9875022e45638d6b14a7e to before 9d0a330abd9e49bcebf6307aac185081bde49a43, b5dc75c915cdaebab9b9875022e45638d6b14a7e to before 354fb03002da0970d337f0d3edbeb46cc4fa6f41, b5dc75c915cdaebab9b9875022e45638d6b14a7e to before b359df793f609b1efce31dadfe6883ec73852619, b5dc75c915cdaebab9b9875022e45638d6b14a7e to before 71796c91ee8e33faf4434a9e210b5063c28ea907, b5dc75c915cdaebab9b9875022e45638d6b14a7e to before 60ab1851614e6007344042b66da6e31d1cc26cb3, b5dc75c915cdaebab9b9875022e45638d6b14a7e to before bd226fa02ed6db6fce0fae010802f0950fd14fb9, b5dc75c915cdaebab9b9875022e45638d6b14a7e to before d0fcf70c680e4d1669fcb3a8632f41400b9a73c2
Linux
Linux · 5.4
Linux
Component: Not specified by the source
File: drivers/firmware/stratix10-svc.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality impact as none; integrity impact as low; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68330
Affected technology
Linux · c16bff4844ffa678ba0c9d077e9797506924ccdd to before aad9d048a3211c48ec02efa405bf462856feb862, c16bff4844ffa678ba0c9d077e9797506924ccdd to before c891f504bb66604c822e7985e093cf39b97fdeb0, c16bff4844ffa678ba0c9d077e9797506924ccdd to before cdd4a9e98004bd7c7488311951fa6dbae38b2b80, c16bff4844ffa678ba0c9d077e9797506924ccdd to before 65ad4ed983fd9ee0259d86391d6a53f78203918c, c16bff4844ffa678ba0c9d077e9797506924ccdd to before 93eaa5ddc5fc4f50ac396afad8ce261102ebd4f3, c16bff4844ffa678ba0c9d077e9797506924ccdd to before 3aa385a9c75c09b59dcab2ff76423439d23673ab
Linux
Linux · 4.2
Linux
Component: Not specified by the source
File: drivers/iio/accel/bmc150-accel-core.c, drivers/iio/accel/bmc150-accel.h
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68331
Affected technology
Linux · eb2a86ae8c544be0ab04aa8169390c0669bc7148 to before 6289fc489e94c9beb6be2b502ccc263663733d72, eb2a86ae8c544be0ab04aa8169390c0669bc7148 to before 66ac05e7b0d6bbd1bee9fcf729e20fd4cce86d17, eb2a86ae8c544be0ab04aa8169390c0669bc7148 to before 75f8e2643085db4f7e136fc6b368eb114dd80a64, eb2a86ae8c544be0ab04aa8169390c0669bc7148 to before e3a55221f4de080cb7a91ba10f01c4f708603f8d, eb2a86ae8c544be0ab04aa8169390c0669bc7148 to before 2b90a8131c83f6f2be69397d2b7d14d217d95d2f, eb2a86ae8c544be0ab04aa8169390c0669bc7148 to before 426edbfc88b22601ea34a441a469092e7b301c52, eb2a86ae8c544be0ab04aa8169390c0669bc7148 to before 26d56a9fcb2014b99e654127960aa0a48a391e3c
Linux
Linux · 5.10
Linux
Component: Not specified by the source
Function: is, to, will
File: drivers/usb/storage/uas.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality impact as none; integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68332
Affected technology
Linux · 2c89e159cd2f386285e9522d6476dd7e801bee22 to before 407b25bb9284d69c27309e691ab1e02f9e1c46ac, 2c89e159cd2f386285e9522d6476dd7e801bee22 to before f7fa1f4670c3c358a451546f0b80b9231952912d, 2c89e159cd2f386285e9522d6476dd7e801bee22 to before e8110402b0c24d822b0b933d87d50870d59667ef, 2c89e159cd2f386285e9522d6476dd7e801bee22 to before 72b3627b0d3b819de49b29c2c8cb1c64d54536b9, 2c89e159cd2f386285e9522d6476dd7e801bee22 to before 9fd8c8ad35c8d2390ce5ca2eb523c044bebdc072, 2c89e159cd2f386285e9522d6476dd7e801bee22 to before 698149d797d0178162f394c55d4ed52aa0e0b7f6, 2c89e159cd2f386285e9522d6476dd7e801bee22 to before 888f7e2847bcb9df8257e656e1e837828942c53b, 2c89e159cd2f386285e9522d6476dd7e801bee22 to before 72262330f7b3ad2130e800cecf02adcce3c32c77
Linux
Linux · 2.6.30
Linux
Component: Not specified by the source
Function: and
File: drivers/comedi/drivers/c6xdigio.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68335
Affected technology
Linux · 00aba6e7b5653a6607238ecdab7172318059d984 to before b2a5b172dc05be6c4f2c5542c1bbc6b14d60ff16, 00aba6e7b5653a6607238ecdab7172318059d984 to before 935ad4b3c325c24fff2c702da403283025ffc722, 00aba6e7b5653a6607238ecdab7172318059d984 to before 88d99ca5adbd01ff088f5fb2ddeba5755e085e52, 00aba6e7b5653a6607238ecdab7172318059d984 to before 5caa40e7c6a43e08e3574f990865127705c22861, 00aba6e7b5653a6607238ecdab7172318059d984 to before d948c53dec36dafe182631457597c49c1f1df5ea, 00aba6e7b5653a6607238ecdab7172318059d984 to before 877adccfacb32687b90714a27cfb09f444fdfa16, 00aba6e7b5653a6607238ecdab7172318059d984 to before a51f025b5038abd3d22eed2ede4cd46793d89565
Linux
Linux · 3.15
Linux
Component: Not specified by the source
Function: in
File: drivers/comedi/drivers/pcl818.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68336
Affected technology
Linux · 1a365e822372ba24c9da0822bc583894f6f3d821 to before 8e5b2cf10844402054b52b489b525dc30cc16908, 1a365e822372ba24c9da0822bc583894f6f3d821 to before c228cb699a07a5f2d596d186bc5c314c99bb8bbf, 1a365e822372ba24c9da0822bc583894f6f3d821 to before 93bd23524d63deb80fb85beb2e43fafeb1043d0f, 1a365e822372ba24c9da0822bc583894f6f3d821 to before 39d2ef113416f1a4205b03fb0aa2e428d1412c77, 1a365e822372ba24c9da0822bc583894f6f3d821 to before b163a5e8c703201c905d6ec7920ed79d167e8442, 1a365e822372ba24c9da0822bc583894f6f3d821 to before 16b3590c0e1e615757dade098c8fbc0d4f040c76, 1a365e822372ba24c9da0822bc583894f6f3d821 to before 396a9270a7b90886be501611b13aa636f2e8c703, 1a365e822372ba24c9da0822bc583894f6f3d821 to before c14ecb555c3ee80eeb030a4e46d00e679537f03a, 3106fb78d3579c8e9c9b3040f7f7841981919624, c0911024ff927ba5c4786b507004cb615be1d776, 09226e5c38639437565af01e6009a9286a351d04, c7673f01604fa722b9d7c1e29e17cec1b8ae09c5, c120c3dbeb76305235c8e557f84d9e2d7d0f5933, 4.4.209 to before 4.5, 4.9.209 to before 4.10, 4.14.164 to before 4.15, 4.19.95 to before 4.20, 5.4.11 to before 5.5
Linux
Linux · 5.5
Linux
Component: Not specified by the source
File: kernel/locking/spinlock_debug.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68337
Affected technology
Linux · 470decc613ab2048b619a01028072d932d9086ee to before 71bbe06c40fc59b5b15661eca8ff307f4176d7f9, 470decc613ab2048b619a01028072d932d9086ee to before ed62fd8c15d41c4127ad16b8219b63124f5962bc, 470decc613ab2048b619a01028072d932d9086ee to before 3faac6531d4818cd6be45e5bbf32937bbbc795c0, 470decc613ab2048b619a01028072d932d9086ee to before b4f8eabf6d991bd41fabcdf9302c4b3eab590cf4, 470decc613ab2048b619a01028072d932d9086ee to before a2a7f854d154a3e9232fec80782dad951655f52f, 470decc613ab2048b619a01028072d932d9086ee to before bf34c72337e40c4670cceeb79b353356933a254b, 470decc613ab2048b619a01028072d932d9086ee to before aa1703f3f706ea0867fb1991dcac709c9ec94cfb, 470decc613ab2048b619a01028072d932d9086ee to before 986835bf4d11032bba4ab8414d18fce038c61bb4
Linux
Linux · 2.6.19
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: fs/jbd2/transaction.c, system
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68339
Affected technology
Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1b60f42a639999c37da7f1fbfa1ad29cf4cbdd2d, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before bd1415efbab507b9b995918105eef953013449dd, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ed34c70d88e2b8b9bc6c3ede88751186d6c6d5d1, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 9917ba597cf95f307778e495f71ff25a5064d167, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 667ac868823224374f819500adc5baa2889c7bc5, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6610361458e7eb6502dd3182f586f91fcc218039, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 82fca3d8a4a34667f01ec2351a607135249c9cff
Linux
Linux · 2.6.12
Linux
Component: Not specified by the source
Function: restores
File: drivers/atm/fore200e.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68340
Affected technology
linux kernel · from 3.7 (inclusive), before 5.15.199 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.123 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.61 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.17.11 (exclusive)
linux
linux kernel · 6.18 · update rc1
linux
linux kernel · 6.18 · update rc2
linux
linux kernel · 6.18 · update rc3
linux
linux kernel · 6.18 · update rc4
linux
linux kernel · 6.18 · update rc5
linux
linux kernel · 6.18 · update rc6
linux
linux kernel · 6.18 · update rc7
linux
Linux · 1d76efe1577b4323609b1bcbfafa8b731eda071a to before f82d1fb65549de241fe312fcb2bcb8e0ad7b424d, 1d76efe1577b4323609b1bcbfafa8b731eda071a to before c8b15b0d2eec3b5c7f585e5a53dfc8d36c818283, 1d76efe1577b4323609b1bcbfafa8b731eda071a to before a74ab1b532ecc5f9106621a8f75b4c3d04466b35, 1d76efe1577b4323609b1bcbfafa8b731eda071a to before e26235840fd961e4ebe5568f11a2a078cf726663, 1d76efe1577b4323609b1bcbfafa8b731eda071a to before 4040b5e8963982a00aa821300cb746efc9f2947e, 1d76efe1577b4323609b1bcbfafa8b731eda071a to before e3eed4f038214494af62c7d2d64749e5108ce6ca, 1d76efe1577b4323609b1bcbfafa8b731eda071a to before 0ae9cfc454ea5ead5f3ddbdfe2e70270d8e2c8ef
Linux
Linux · 3.7
Linux
Component: Not specified by the source
File: drivers/net/team/team_core.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68344
Affected technology
Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 488bf86d60077f52810c60dbdf7468c277880167, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d2f5d8cf1eadb7b33e476f59aa9c6653e4f2b937, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 4f811071e702fbb74933526e2fbadf8c4ed0c0c4, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 02b63f3bc29265bd9e83191792d200ed563acacf, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 5588b7c86effffa9bb55383a38800649d7b40778, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before bca11de0a277b8baeb7d006f93b543c907b6e782, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1823e08f76c68b9e1d26f6d5ef831b96f61a62a0, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 0c4a13ba88594fd4a27292853e736c6b4349823d
Linux
Linux · 2.6.12
Linux
Component: Not specified by the source
Function: has
File: sound/isa/wavefront/wavefront_synth.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and availability impact as none; integrity impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68346
Affected technology
Linux · 58579c056c1c9510ae6695ed8e01ee05bbdcfb23 to before d6280a5b00cad37d9a9a875849e5bf7ed2fe4950, 58579c056c1c9510ae6695ed8e01ee05bbdcfb23 to before 3cf854cec0eb371da47ff5fe56eab189d7fa623a, 58579c056c1c9510ae6695ed8e01ee05bbdcfb23 to before 4a6ab0f6cc9bdfdfecbf257a46ff4275bd965af4, 58579c056c1c9510ae6695ed8e01ee05bbdcfb23 to before dea3ed2c16f99f46f97b1a090bf80ecdd6972ce0, 58579c056c1c9510ae6695ed8e01ee05bbdcfb23 to before c0a1fe1902ad23e6d48e0f68be1258ccf7a163e6, 58579c056c1c9510ae6695ed8e01ee05bbdcfb23 to before 932aa1e80b022419cf9710e970739b7a8794f27c, 58579c056c1c9510ae6695ed8e01ee05bbdcfb23 to before 1e1b3207a53e50d5a66289fffc1f7d52cd9c50f9, 58579c056c1c9510ae6695ed8e01ee05bbdcfb23 to before 324f3e03e8a85931ce0880654e3c3eb38b0f0bba
Linux
Linux · 4.18
Linux
Component: Not specified by the source
Function: detect_stream_formats
File: sound/firewire/dice/dice-extension.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68349
Affected technology
Linux · fe1cf9469d7bcb6af27e42eb555a41b0135bce4a to before 084bebe82ad86f718a3af84f34761863e63164ed, fe1cf9469d7bcb6af27e42eb555a41b0135bce4a to before b6e4e3a08c03200cc4b8067ec8ab3172a989d6fc, fe1cf9469d7bcb6af27e42eb555a41b0135bce4a to before 104080582ae0aa6dce6c6d75ff89062efe84673b, fe1cf9469d7bcb6af27e42eb555a41b0135bce4a to before f718f9ea6094843b8c059b073af49ad61e9f49bb, fe1cf9469d7bcb6af27e42eb555a41b0135bce4a to before 59947dff0fb7c19c09ce6dccbcd253fd542b6c25, fe1cf9469d7bcb6af27e42eb555a41b0135bce4a to before ca2e7fdad7c683b64821c94a58b9b68733214dad, fe1cf9469d7bcb6af27e42eb555a41b0135bce4a to before 38694f9aae00459ab443a7dc8b3949a6b33b560a, fe1cf9469d7bcb6af27e42eb555a41b0135bce4a to before e0f8058f2cb56de0b7572f51cd563ca5debce746
Linux
Linux · 4.10
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: fs/nfs/pnfs.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68354
Affected technology
Linux · a06ccd9c3785fa5550917ae036944f4e080b5749 to before e1587064137028e7edcca14fb766b68d27bec94b, a06ccd9c3785fa5550917ae036944f4e080b5749 to before 9d041a7ba13f21adfac052eb3fda1df62f2166c1, a06ccd9c3785fa5550917ae036944f4e080b5749 to before a63fbc07d1b34a9821ea3b31ff4e6456f9d0aa61, a06ccd9c3785fa5550917ae036944f4e080b5749 to before 09811a83b214cc15521e0d818e43ae9043e9a28d, a06ccd9c3785fa5550917ae036944f4e080b5749 to before a9864d42ebcdd394ebb864643b961b36e7b515be, a06ccd9c3785fa5550917ae036944f4e080b5749 to before 431a1d44ad4866362cc28fc1cc4ca93d84989239, a06ccd9c3785fa5550917ae036944f4e080b5749 to before 64099b5c0aeb70bc7cd5556eb7f59c5b4a5010bf, a06ccd9c3785fa5550917ae036944f4e080b5749 to before 0cc15a10c3b4ab14cd71b779fd5c9ca0cb2bc30d
Linux
Linux · 3.13
Linux
Component: Not specified by the source
File: drivers/regulator/core.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68362
Affected technology
Linux · 6f7853f3cbe457067e9fe05461f56c7ea4ac488c to before 118e12bf3e4288cf845cd3759bd9d4c99f91aab5, 6f7853f3cbe457067e9fe05461f56c7ea4ac488c to before 6a96bd0d94305fd04a6ac64446ec113bae289384, 6f7853f3cbe457067e9fe05461f56c7ea4ac488c to before e2f3ea15e804607e0a4a34a2f6c331c8750b68bc, 6f7853f3cbe457067e9fe05461f56c7ea4ac488c to before dc153401fb26c1640a2b279c47b65e1c416af276, 6f7853f3cbe457067e9fe05461f56c7ea4ac488c to before 4758770a673c60d8f615809304d72e1432fa6355, 6f7853f3cbe457067e9fe05461f56c7ea4ac488c to before 638d4148e166d114a4cd7becaae992ce1a815ed8, 6f7853f3cbe457067e9fe05461f56c7ea4ac488c to before 5ebf0fe7eaef9f6173a4c6ea77c5353e21645d15, 6f7853f3cbe457067e9fe05461f56c7ea4ac488c to before b647d2574e4583c2e3b0ab35568f60c88e910840
Linux
Linux · 2.6.27
Linux
Component: Not specified by the source
File: drivers/net/wireless/realtek/rtl818x/rtl8187/dev.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68364
Affected technology
Linux · 8f603e567aa7a243e68ca48b4f105b990851360f to before cb34a55f552960c74e26b3699c84745b96e3131a, 8f603e567aa7a243e68ca48b4f105b990851360f to before 08b93c1c12c66989316883d733475c64d14de5d2, 8f603e567aa7a243e68ca48b4f105b990851360f to before 1ad2f81a099b8df5f72bce0a3e9f531263a846b8, 8f603e567aa7a243e68ca48b4f105b990851360f to before bcb94288d95cfc52f4d7cead260f4db54c8c741a, 8f603e567aa7a243e68ca48b4f105b990851360f to before e5c2503696ec2e0dc7b2aee902dc859ccde39ddf, 8f603e567aa7a243e68ca48b4f105b990851360f to before 7abbe41d22a06aae00fd46d29f59dd40a01e988f, 8f603e567aa7a243e68ca48b4f105b990851360f to before e5c52c320577cd405b251943ef77842dc6f303bf, 8f603e567aa7a243e68ca48b4f105b990851360f to before 8a7d58845fae061c62b50bc5eeb9bae4a1dedc3d
Linux
Linux · 3.0
Linux
Component: Not specified by the source
File: fs/ocfs2/move_extents.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68365
Affected technology
linux kernel · from 5.15 (inclusive), before 5.15.199 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.2 (exclusive)
linux
Linux · 82cae269cfa953032fbb8980a7d554d60fb00b17 to before bdf38063fd15f2fc7361dc0b5d3c259741eab835, 82cae269cfa953032fbb8980a7d554d60fb00b17 to before a58e29849aef8d26554a982989a2190b49aaf8ed, 82cae269cfa953032fbb8980a7d554d60fb00b17 to before 7d52c592cf53f5bb7163967edc01d2d7d80de44a, 82cae269cfa953032fbb8980a7d554d60fb00b17 to before f7728057220cabd720e27e46097edad48e5bd728, 82cae269cfa953032fbb8980a7d554d60fb00b17 to before 192e8ce302f14ac66259231dd10cede19858d742, 82cae269cfa953032fbb8980a7d554d60fb00b17 to before a8a3ca23bbd9d849308a7921a049330dc6c91398
Linux
Linux · 5.15
Linux
Component: Not specified by the source
File: fs/ntfs3/inode.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 8.2/10) rates confidentiality impact as low; integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68366
Affected technology
Linux · e46c7287b1c27683a8e30ca825fb98e2b97f1099 to before 330d688a5ca53857828081a3cf31b92ad1b0b3ed, e46c7287b1c27683a8e30ca825fb98e2b97f1099 to before cd93db1b1b4460e6ee77564024ea461e5940f69c, e46c7287b1c27683a8e30ca825fb98e2b97f1099 to before ae3e7bc1f4b393ae20e5c85583eb2c6977374716, e46c7287b1c27683a8e30ca825fb98e2b97f1099 to before 2e5e0665a594f076ef2b9439447bae8be293d09d, e46c7287b1c27683a8e30ca825fb98e2b97f1099 to before c9b99c948b4fb014812afe7b5ccf2db121d22e46, e46c7287b1c27683a8e30ca825fb98e2b97f1099 to before 9a38306643874566d20f7aba7dff9e6f657b51a9, e46c7287b1c27683a8e30ca825fb98e2b97f1099 to before c9e805f6a35d1dd189a9345595a5c20e87611942, e46c7287b1c27683a8e30ca825fb98e2b97f1099 to before 1649714b930f9ea6233ce0810ba885999da3b5d4
Linux
Linux · 4.12
Linux
Component: Not specified by the source
File: drivers/block/nbd.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68367
Affected technology
Linux · 99b089c3c38a83ebaeb1cc4584ddcde841626467 to before d5f1d40fd342b589420de7508b4c748fcf28122e, 99b089c3c38a83ebaeb1cc4584ddcde841626467 to before 14c209835e47a87e6da94bb9401e570dcc14f31f, 99b089c3c38a83ebaeb1cc4584ddcde841626467 to before 583d36523f56d8e9ddfa0bec20743a6faefc9b74, 99b089c3c38a83ebaeb1cc4584ddcde841626467 to before 61abf8c3162d155b4fd0fb251f08557093363a0a, 99b089c3c38a83ebaeb1cc4584ddcde841626467 to before 230621ffdb361d15cd3ef92d8b4fa8d314f4fad4, 99b089c3c38a83ebaeb1cc4584ddcde841626467 to before 388391dd1cc567fcf0b372b63d414c119d23e911, 99b089c3c38a83ebaeb1cc4584ddcde841626467 to before 48a7d427eb65922b3f17fbe00e2bbc7cb9eac381, 99b089c3c38a83ebaeb1cc4584ddcde841626467 to before 1e4b207ffe54cf33a4b7a2912c4110f89c73bf3f
Linux
Linux · 2.6.34
Linux
Component: Not specified by the source
File: drivers/macintosh/mac_hid.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68372
Affected technology
Linux · 87aac3a80af5cbad93e63250e8a1e19095ba0d30 to before 198aa230a6f8c1f6af7ed26b29180749c3e79e4d, 87aac3a80af5cbad93e63250e8a1e19095ba0d30 to before d3ba312675911ff9e3fefefd551751e153a9f0a9, 87aac3a80af5cbad93e63250e8a1e19095ba0d30 to before 3692884bd6187d89d41eef81e5a9724519fd01c1, 87aac3a80af5cbad93e63250e8a1e19095ba0d30 to before 1ba2ced2bbdf7e64a30c3e88c70ea8bc208d1509, 87aac3a80af5cbad93e63250e8a1e19095ba0d30 to before 6b69593f72e1bfba6ca47ca8d9b619341fded7d6, 87aac3a80af5cbad93e63250e8a1e19095ba0d30 to before 443a1721806b6ff6303b5229e9811d68172d622f, 87aac3a80af5cbad93e63250e8a1e19095ba0d30 to before 742012f6bf29553fdc460bf646a58df3a7b43d01, 87aac3a80af5cbad93e63250e8a1e19095ba0d30 to before 9517b82d8d422d426a988b213fdd45c6b417b86d, 0a4e383fc3aa6540f804c4fd1184a96ae5de6ef8, 2ef6f4bd60411934e3fc2715442c2afe70f84bf3, 742fd49cf811ca164489e339b862e3fb8e240a73, 14df8724aeeef338172e2a2d6efadc989921ca0f, 4.14.204 to before 4.15, 4.19.155 to before 4.20, 5.4.75 to before 5.5, 5.9.5 to before 5.10
Linux
Linux · 5.10
Linux
Component: Not specified by the source
File: drivers/block/nbd.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68724
Affected technology
Linux · 7901c1a8effbe5f89673bfc09d6e37b8f334f1a7 to before 60a7be5ee74408147e439164ac067e418ca74bb4, 7901c1a8effbe5f89673bfc09d6e37b8f334f1a7 to before c13c6e9de91d7f1dd7df756b1fa5a1f968839d76, 7901c1a8effbe5f89673bfc09d6e37b8f334f1a7 to before dfc1613961828745165aec6552c3818fa14ab725, 7901c1a8effbe5f89673bfc09d6e37b8f334f1a7 to before 5b8ac617c8dab5cad3c4dc8d84d0987808a0f99c, 7901c1a8effbe5f89673bfc09d6e37b8f334f1a7 to before c73be4f51eed98fa0c7c189db8f279e1c86bfbf7, 7901c1a8effbe5f89673bfc09d6e37b8f334f1a7 to before 6af753ac5205115e6c310c8c4236c01b59a1c44f, 7901c1a8effbe5f89673bfc09d6e37b8f334f1a7 to before b7090a5c153105b9fd221a5a81459ee8cd5babd6, 7901c1a8effbe5f89673bfc09d6e37b8f334f1a7 to before df0845cf447ae1556c3440b8b155de0926cbaa56
Linux
Linux · 3.18
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: crypto/asymmetric_keys/asymmetric_type.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68725
Affected technology
linux kernel · from 5.6 (inclusive), before 5.10.249 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.2 (exclusive)
linux
Linux · 850a88cc4096fe1df407452ba2e4d28cf5b3eee9 to before bb7902ed7d7f6d6a7c6c4dc25410d6127ce1085f, 850a88cc4096fe1df407452ba2e4d28cf5b3eee9 to before e0ffb64a2d72c6705b4a4c9efef600409f7e98a0, 850a88cc4096fe1df407452ba2e4d28cf5b3eee9 to before 768376ece7036ecb8604961793a1b72afe6345dd, 850a88cc4096fe1df407452ba2e4d28cf5b3eee9 to before 8670b53b8ee91f028f7240531064020b7413c461, 850a88cc4096fe1df407452ba2e4d28cf5b3eee9 to before 0f3a60869ca22024dfb9c6fce412b0c70cb4ea36, 850a88cc4096fe1df407452ba2e4d28cf5b3eee9 to before fbea4c63b5385588cb44ab21f91e55e33c719a54, 850a88cc4096fe1df407452ba2e4d28cf5b3eee9 to before 04a899573fb87273a656f178b5f920c505f68875
Linux
Linux · 5.6
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: net/bpf/test_run.c, net/core/filter.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68727
Affected technology
Linux · 78ab59fee07f22464f32eafebab2bd97ba94ff2d to before 90e23db1a85956026999c18e76f402542cb004da, 78ab59fee07f22464f32eafebab2bd97ba94ff2d to before 53f4d6cb97096590410f3719f75cdf9fc5120f37, 78ab59fee07f22464f32eafebab2bd97ba94ff2d to before dcb5e3cd96b77d52bb65988e4c914636a6d4fdd9, 78ab59fee07f22464f32eafebab2bd97ba94ff2d to before 4b1fd82848fdf0e01b3320815b261006c1722c3e, 78ab59fee07f22464f32eafebab2bd97ba94ff2d to before d88d4b455b6794f48d7adad52593f1700c7bd50e, 78ab59fee07f22464f32eafebab2bd97ba94ff2d to before b40a4eb4a0543d49686a6e693745009dac3b86a9, 78ab59fee07f22464f32eafebab2bd97ba94ff2d to before 9948dcb2f7b5a1bf8e8710eafaf6016e00be3ad6
Linux
Linux · 5.15
Linux
Component: Not specified by the source
File: fs/ntfs3/inode.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality impact as low; integrity and availability impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68728
Affected technology
Linux · 4342306f0f0d5ff4315a204d315c1b51b914fca5 to before afb144bc8e920db43a23e996eb0a6f9bdea84341, 4342306f0f0d5ff4315a204d315c1b51b914fca5 to before c70b3abfd530c7f574bc25a5f84707e6fdf0def8, 4342306f0f0d5ff4315a204d315c1b51b914fca5 to before 8bf729b96303bb862d7c6dc05edcf51274ae04cf, 4342306f0f0d5ff4315a204d315c1b51b914fca5 to before 7ce8f2028dfccb2161b905cf8ab85cdd9e93909c, 4342306f0f0d5ff4315a204d315c1b51b914fca5 to before 46f2a881e5a7311d41551edb3915e4d4e8802341, 4342306f0f0d5ff4315a204d315c1b51b914fca5 to before 81ffe9a265df3e41534726b852ab08792e3d374d, 4342306f0f0d5ff4315a204d315c1b51b914fca5 to before 73e6b9dacf72a1e7a4265eacca46f8f33e0997d6
Linux
Linux · 5.15
Linux
Component: Not specified by the source
File: fs/ntfs3/fsntfs.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality impact as high; integrity and availability impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68732
Affected technology
Linux · f5ba33fb9690566c382624637125827b5512e766 to before ca9388fba50dac2eb71c13702b7022a801bef90e, f5ba33fb9690566c382624637125827b5512e766 to before 4aeaece518fa4436af93d1d8b786200d9656ff4b, f5ba33fb9690566c382624637125827b5512e766 to before 6245cce711e2cdb2cc75c0bb8632952e36f8c972, f5ba33fb9690566c382624637125827b5512e766 to before 4e6e07ce0197aecfb6c4a62862acc93b3efedeb7, f5ba33fb9690566c382624637125827b5512e766 to before d138f73ffb0c57ded473c577719e6e551b7b1f27, f5ba33fb9690566c382624637125827b5512e766 to before 79197c6007f2afbfd7bcf5b9b80ccabf8483d774, f5ba33fb9690566c382624637125827b5512e766 to before c7d393267c497502fa737607f435f05dfe6e3d9b
Linux
Linux · 5.13
Linux
Component: Not specified by the source
File: drivers/gpu/host1x/syncpt.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68733
Affected technology
Linux · 38416e53936ecf896948fdeffc36b76979117952 to before c80173233014a360c13fa5cc79d36bfe6e53a8ed, 38416e53936ecf896948fdeffc36b76979117952 to before 6b1e45e13546c9ea0b1d99097993ac0aafae90b1, 38416e53936ecf896948fdeffc36b76979117952 to before 4a7a7621619a366712fb9cefcb6e69f956c247ce, 38416e53936ecf896948fdeffc36b76979117952 to before f8fd5491100f920847a3338d5fba22db19c72773, 38416e53936ecf896948fdeffc36b76979117952 to before ac9fce2efabad37c338aac86fbe100f77a080e59, 38416e53936ecf896948fdeffc36b76979117952 to before 64aa81250171b6bb6803e97ea7a5d73bfa061f6e, 38416e53936ecf896948fdeffc36b76979117952 to before 60e8d49989410a7ade60f5dadfcd979c117d05c0, 38416e53936ecf896948fdeffc36b76979117952 to before c147e13ea7fe9f118f8c9ba5e96cbd644b00d6b3
Linux
Linux · 4.4
Linux
Component: Not specified by the source
File: security/smack/smack_lsm.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and availability impact as none; integrity impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68734
Affected technology
Linux · 69f52adb2d534afc41fcc658f155e01f0b322f9e to before 475032fa2bb82ffb592c321885e917e39f47357f, 69f52adb2d534afc41fcc658f155e01f0b322f9e to before adb7577e23a431fc53aa1b6107733c0d751015fb, 69f52adb2d534afc41fcc658f155e01f0b322f9e to before b70c24827e11fdc71465f9207e974526fb457bb9, 69f52adb2d534afc41fcc658f155e01f0b322f9e to before 3f7c72bc73c4e542fde14cce017549d8a0b61a3c, 69f52adb2d534afc41fcc658f155e01f0b322f9e to before 03695541b3349bc40bf5d6563d44d6147fb20260, 69f52adb2d534afc41fcc658f155e01f0b322f9e to before 6dce43433e0635e7b00346bc937b69ce48ea71bb, 69f52adb2d534afc41fcc658f155e01f0b322f9e to before ea7936304ed74ab7f965d17f942a173ce91a5ca8, 69f52adb2d534afc41fcc658f155e01f0b322f9e to before 3f978e3f1570155a1327ffa25f60968bc7b9398f
Linux
Linux · 2.6.29
Linux
Component: Not specified by the source
File: drivers/isdn/hardware/mISDN/hfcsusb.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-68740
Affected technology
Linux · 4af4662fa4a9dc62289c580337ae2506339c4729 to before d14e0ec6a6828ee0dffa163fb5d513c9a21f0a51, 4af4662fa4a9dc62289c580337ae2506339c4729 to before f2f4627b74c120fcdd8e1db93bc91f9bbaf46f85, 4af4662fa4a9dc62289c580337ae2506339c4729 to before 88cd5fbf5869731be8fc6f7cecb4e0d6ab3d8749, 4af4662fa4a9dc62289c580337ae2506339c4729 to before cca3e7df3c0f99542033657ba850b9a6d27f8784, 4af4662fa4a9dc62289c580337ae2506339c4729 to before c2238d487a640ae3511e1b6f4640ab27ce10d7f6, 4af4662fa4a9dc62289c580337ae2506339c4729 to before de4431faf308d0c533cb386f5fa9af009bc86158, 4af4662fa4a9dc62289c580337ae2506339c4729 to before 32952c4f4d1b2deb30dce72ba109da808a9018e1, 4af4662fa4a9dc62289c580337ae2506339c4729 to before 738c9738e690f5cea24a3ad6fd2d9a323cf614f6
Linux
Linux · 2.6.30
Linux
Component: Not specified by the source
Function: incorrectly
File: security/integrity/ima/ima_policy.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68746
Affected technology
Linux · 921fc1838fb036f690b8ba52e6a6d3644b475cbb to before 88db8bb7ed1bb474618acdf05ebd4f0758d244e2, 921fc1838fb036f690b8ba52e6a6d3644b475cbb to before 83309dd551cfd60a5a1a98d9cab19f435b44d46d, 921fc1838fb036f690b8ba52e6a6d3644b475cbb to before c934e40246da2c5726d14e94719c514e30840df8, 921fc1838fb036f690b8ba52e6a6d3644b475cbb to before 551060efb156c50fe33799038ba8145418cfdeef, 921fc1838fb036f690b8ba52e6a6d3644b475cbb to before bb0c58be84f907285af45657c1d4847b960a12bf, 921fc1838fb036f690b8ba52e6a6d3644b475cbb to before 01bbf25c767219b14c3235bfa85906b8d2cb8fbc, 921fc1838fb036f690b8ba52e6a6d3644b475cbb to before b4e002d8a7cee3b1d70efad0e222567f92a73000
Linux
Linux · 5.12
Linux
Component: Not specified by the source
File: drivers/spi/spi-tegra210-quad.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68757
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-68758
Affected technology
Linux · ae232e45acf9621f2c96b41ca3af006ac7552c33 to before 64739adf3eef063b8e2c72b7e919eac8c6480bf0, ae232e45acf9621f2c96b41ca3af006ac7552c33 to before cd01a24b3e52d6777b49c917d841f125fe9eebd0, ae232e45acf9621f2c96b41ca3af006ac7552c33 to before e06df738a9ad8417f1c4c7cd6992cda320e9e7ca, ae232e45acf9621f2c96b41ca3af006ac7552c33 to before 30cbe4b642745a9488a0f0d78be43afe69d7555c, ae232e45acf9621f2c96b41ca3af006ac7552c33 to before 0e63ea4378489e09eb5e920c8a50c10caacf563a, ae232e45acf9621f2c96b41ca3af006ac7552c33 to before 60a24070392ec726ccfe6ad1ca7b0381c8d8f7c9, ae232e45acf9621f2c96b41ca3af006ac7552c33 to before 08c9dc6b0f2c68e5e7c374ac4499e321e435d46c, ae232e45acf9621f2c96b41ca3af006ac7552c33 to before 9341d6698f4cfdfc374fb6944158d111ebe16a9d
Linux
Linux · 5.6
Linux
Component: Not specified by the source
File: drivers/video/backlight/led_bl.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-68759
Affected technology
Linux · f653211197f3841f383fa9757ef8ce182c6cf627 to before 3677c01891fb0239361e444afee8398868e34bdf, f653211197f3841f383fa9757ef8ce182c6cf627 to before 89caaeee8dd95fae8bb4f4964e6fe3ca688500c4, f653211197f3841f383fa9757ef8ce182c6cf627 to before a4fb7cca9837378878e6c94d9e7af019c8fdfcdb, f653211197f3841f383fa9757ef8ce182c6cf627 to before bf8513dfa31ea015c9cf415796dca2113d293840, f653211197f3841f383fa9757ef8ce182c6cf627 to before ee7db11742b30641f21306105ad27a275e3c61d7, f653211197f3841f383fa9757ef8ce182c6cf627 to before a813a74570212cb5f3a7d3b05c0cb0cd00bace1d, f653211197f3841f383fa9757ef8ce182c6cf627 to before c9d1c4152e6d32fa74034464854bee262a60bc43, f653211197f3841f383fa9757ef8ce182c6cf627 to before 9b5b9c042b30befc5b37e4539ace95af70843473
Linux
Linux · 2.6.25
Linux
Component: Not specified by the source
File: drivers/net/wireless/realtek/rtl818x/rtl8180/dev.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-68764
Affected technology
Linux · f2aedb713c284429987dc66c7aaf38decfc8da2a to before a3dc6c40bcab1a888d5c0d134ccc0746b4c98929, f2aedb713c284429987dc66c7aaf38decfc8da2a to before ba1495aefd22fcf0746a2a3025c95d766d7cde4d, f2aedb713c284429987dc66c7aaf38decfc8da2a to before c09070b4def1b34e473a746c6a5331ccb80902c1, f2aedb713c284429987dc66c7aaf38decfc8da2a to before dce10c59211e5cd763a62ea01e79b82a629811e3, f2aedb713c284429987dc66c7aaf38decfc8da2a to before 612cc98698d667df804792f0c47d4e501e66da29, f2aedb713c284429987dc66c7aaf38decfc8da2a to before 4b296944e632cf4c6a4cc8e2585c6451eae47b1b, f2aedb713c284429987dc66c7aaf38decfc8da2a to before df9b003a2ecacc7218486fbb31fe008c93097d5f, f2aedb713c284429987dc66c7aaf38decfc8da2a to before 8675c69816e4276b979ff475ee5fac4688f80125
Linux
Linux · 5.6
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: fs/nfs/namespace.c, fs/nfs/super.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68765
Affected technology
Linux · 99c457d902cf90bdc0df5d57e6156ec108711068 to before d6c91fc732698642f70c688324c98551b97b412c, 99c457d902cf90bdc0df5d57e6156ec108711068 to before 594ff8bb69e239678a8baa461827ce4bb90eff8f, 99c457d902cf90bdc0df5d57e6156ec108711068 to before 1c3c234af9407256ed670c8752923a672eea4225, 99c457d902cf90bdc0df5d57e6156ec108711068 to before 278bfed4529a0c9c9119f5a52ddafe69db61a75c, 99c457d902cf90bdc0df5d57e6156ec108711068 to before fb905e69941b44e03fe1a24e95328d45442b6d6d, 99c457d902cf90bdc0df5d57e6156ec108711068 to before 4d42aba0ee49c0aa015c50c4f2a07cf8fa1c3a49, 99c457d902cf90bdc0df5d57e6156ec108711068 to before 53d1548612670aa8b5d89745116cc33d9d172863
Linux
Linux · 5.7
Linux
Component: Not specified by the source
Function: returns
File: drivers/net/wireless/mediatek/mt76/mt7615/mcu.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-68767
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-68769
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-68771
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-68774
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-68776
Affected technology
Linux · f266a683a4804dc499efc6c2206ef68efed029d0 to before 3ce95a57d8a1f0e20b637cdeddaaed81831ca819, f266a683a4804dc499efc6c2206ef68efed029d0 to before c851e43b88b40bb7c20176c51cbf4f8c8d960dd9, f266a683a4804dc499efc6c2206ef68efed029d0 to before 7be6d25f4d974e44918ba3a5d58ebb9d36879087, f266a683a4804dc499efc6c2206ef68efed029d0 to before 8f289fa12926aae44347ca7d490e216555d8f255, f266a683a4804dc499efc6c2206ef68efed029d0 to before 1742974c24a9c1f1fd2e5edca0cbaccb720b397a, f266a683a4804dc499efc6c2206ef68efed029d0 to before 6220d38a08f8837575cd8f830928b49a3a5a5095, f266a683a4804dc499efc6c2206ef68efed029d0 to before 188e0fa5a679570ea35474575e724d8211423d17
Linux
Linux · 3.17
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: net/hsr/hsr_forward.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-68777
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-68780
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-68782
Affected technology
Linux · 9e95fb805dc043cc8ed878a08d1583e4097a5f80 to before 6cac97b12bdab04832e0416d049efcd0d48d303b, 9e95fb805dc043cc8ed878a08d1583e4097a5f80 to before 45fd86b444105c8bd07a763f58635c87e5dc7aea, 9e95fb805dc043cc8ed878a08d1583e4097a5f80 to before 8727663ded659aad55eef21e3864ebf5a4796a96, 9e95fb805dc043cc8ed878a08d1583e4097a5f80 to before 0260ad551b0815eb788d47f32899fbcd65d6f128, 9e95fb805dc043cc8ed878a08d1583e4097a5f80 to before 0d36db68fdb8a3325386fd9523b67735f944e1f3, 9e95fb805dc043cc8ed878a08d1583e4097a5f80 to before 8edbb9e371af186b4cf40819dab65fafe109df4d, 9e95fb805dc043cc8ed878a08d1583e4097a5f80 to before 5053eab38a4c4543522d0c320c639c56a8b59908
Linux
Linux · 5.8
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: drivers/target/target_core_transport.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68783
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-68785
Affected technology
Linux · b2d0f5d5dc53532e6f07bc546a476a55ebdfe0f3 to before d0c135b8bbbcf92836068fd395bebeb7ae6c7bef, b2d0f5d5dc53532e6f07bc546a476a55ebdfe0f3 to before 3bc2efff20a38b2c7ca18317649715df0dd62ced, b2d0f5d5dc53532e6f07bc546a476a55ebdfe0f3 to before 1b569db9c2f28b599e40050524aae5f7332bc294, b2d0f5d5dc53532e6f07bc546a476a55ebdfe0f3 to before 10ffc558246f2c75619aedda0921906095e46702, b2d0f5d5dc53532e6f07bc546a476a55ebdfe0f3 to before 2ecfc4433acdb149eafd7fb22d7fd4adf90b25e9, b2d0f5d5dc53532e6f07bc546a476a55ebdfe0f3 to before c999153bfb2d1d9b295b7010d920f2a7c6d7595f, b2d0f5d5dc53532e6f07bc546a476a55ebdfe0f3 to before 5ace7ef87f059d68b5f50837ef3e8a1a4870c36e
Linux
Linux · 4.15
Linux
Component: Not specified by the source
File: net/openvswitch/flow_netlink.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68787
Affected technology
Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f77e538ac4e3adb1882d5bccb7bfdc111b5963d3, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 09efbf54eeaecebe882af603c9939a4b1bb9567e, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 73839497bbde5cd4fd02bbd9c8bc2640780ae65d, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 156a0f6341dce634a825db49ca20b48b1ae9bcc1, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8d1ccba4b171cd504ecfa47349cb9864fc9d687c, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 51f5fbc1681bdcffcc7d18bf3dfdb2b1278d3977, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 613d12dd794e078be8ff3cf6b62a6b9acf7f4619
Linux
Linux · 2.6.12
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: net/netrom/nr_out.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-68788
Affected technology
Linux · 72acc854427948efed7a83da27f7dc3239ac9afc to before df2711544b050aba703e6da418c53c7dc5d443ca, 72acc854427948efed7a83da27f7dc3239ac9afc to before 859bdf438f01d9aa7f84b09c1202d548c7cad9e8, 72acc854427948efed7a83da27f7dc3239ac9afc to before 6a7d7d96eeeab7af2bd01afbb3d9878a11a13d91, 72acc854427948efed7a83da27f7dc3239ac9afc to before e0643d46759db8b84c0504a676043e5e341b6c81, 72acc854427948efed7a83da27f7dc3239ac9afc to before 82f7416bcbd951549e758d15fc1a96a5afc2e900, 72acc854427948efed7a83da27f7dc3239ac9afc to before 7a93edb23bcf07a3aaf8b598edfc2faa8fbcc0b6, 72acc854427948efed7a83da27f7dc3239ac9afc to before 635bc4def026a24e071436f4f356ea08c0eed6ff
Linux
Linux · 2.6.36
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: fs/notify/fsnotify.c
What an attacker can do
The same user can subscribe for watching events on children when the user has access to the parent directory (e.g. /dev).
CVE-2025-68795
Affected technology
Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 3df375a1e75483b7d973c3cc2e46aa374db8428b, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f9dc0f45d2cd0189ce666288a29d2cc32c2e44d5, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 4afcb985355210e1688560dc47e64b94dad35d71, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ca9983bc3a1189bd72f9ae449d925a66b2616326, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7bea09f60f2ad5d232e2db8f1c14e850fd3fd416, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 4066b5b546293f44cd6d0e84ece6e3ee7ff27093, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7b07be1ff1cb6c49869910518650e8d0abc7d25f
Linux
Linux · 2.6.12
Linux
Component: Not specified by the source
File: net/ethtool/ioctl.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68796
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-68797
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-68799
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-68800
Affected technology
Linux · f38656d067257cc43b652958dd154e1ab0773701 to before b957366f5611bbaba03dd10ef861283347ddcc88, f38656d067257cc43b652958dd154e1ab0773701 to before 6e367c361a523a4b54fe618215c64a0ee189caf0, f38656d067257cc43b652958dd154e1ab0773701 to before 37ca08b35a27ce8fd8e74dd3fd2ae21c23b63b73, f38656d067257cc43b652958dd154e1ab0773701 to before 5f2831fc593c2b2efbff7dd0dd7441cec76adcd5, f38656d067257cc43b652958dd154e1ab0773701 to before 216afc198484fde110ebeafc017992266f4596ce, f38656d067257cc43b652958dd154e1ab0773701 to before 4049a6ace209f4ed150429f86ae796d7d6a4c22b, f38656d067257cc43b652958dd154e1ab0773701 to before 8ac1dacec458f55f871f7153242ed6ab60373b90
Linux
Linux · 5.7
Linux
Component: Not specified by the source
File: drivers/net/ethernet/mellanox/mlxsw/spectrum_mr.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
A local attacker with low privileges can trigger a use-after-free error. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not state a further attacker outcome.
CVE-2025-68801
Affected technology
Linux · 6cf3c971dc84cb36579515ddb488919b9e9fb6de to before a2dfe6758fc63e542105bee8b17a3a7485684db0, 6cf3c971dc84cb36579515ddb488919b9e9fb6de to before 9e0a0d9eeb0dbeba2c83fa837885b19b8b9230fc, 6cf3c971dc84cb36579515ddb488919b9e9fb6de to before c437fbfd4382412598cdda1f8e2881b523668cc2, 6cf3c971dc84cb36579515ddb488919b9e9fb6de to before 4a3c569005f42ab5e5b2ad637132a33bf102cc08, 6cf3c971dc84cb36579515ddb488919b9e9fb6de to before ed8141b206bdcfd5d0b92c90832eeb77b7a60a0a, 6cf3c971dc84cb36579515ddb488919b9e9fb6de to before 675c5aeadf6472672c472dc0f26401e4fcfbf254, 6cf3c971dc84cb36579515ddb488919b9e9fb6de to before 8b0e69763ef948fb872a7767df4be665d18f5fd4
Linux
Linux · 4.8
Linux
Component: Not specified by the source
File: drivers/net/ethernet/mellanox/mlxsw/spectrum_router.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68803
Affected technology
Linux · c5409ce523af40d5c3019717bc5b4f72038d48be to before c182e1e0b7640f6bcc0c5ca8d473f7c57199ea3d, d52acd23a327cada5fb597591267cfc09f08bb1d to before 75f91534f9acdfef77f8fa094313b7806f801725, c0cbe70742f4a70893cd6e5f6b10b6e89b6db95b to before 60dbdef2ebc2317266a385e4debdb1bb0e57afe1, c0cbe70742f4a70893cd6e5f6b10b6e89b6db95b to before 381261f24f4e4b41521c0e5ef5cc0b9a786a9862, c0cbe70742f4a70893cd6e5f6b10b6e89b6db95b to before bf4e671c651534a307ab2fabba4926116beef8c3, c0cbe70742f4a70893cd6e5f6b10b6e89b6db95b to before 214b396480061cbc8b16f2c518b2add7fbfa5192, c0cbe70742f4a70893cd6e5f6b10b6e89b6db95b to before 913f7cf77bf14c13cfea70e89bcb6d0b22239562, 5.10.220 to before 5.10.248, 5.15.154 to before 5.15.198
Linux
Linux · 6.0
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
Function: returns
File: fs/nfsd/vfs.h
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · Low privileges required · User interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 8.0/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68804
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-68808
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-68813
Affected technology
Linux · ed0de45a1008991fdaa27a0152befcb74d126a8b to before dd72a93c80408f06327dd2d956eb1a656d0b5903, ed0de45a1008991fdaa27a0152befcb74d126a8b to before 312d7cd88882fc6cadcc08b02287497aaaf94bcd, ed0de45a1008991fdaa27a0152befcb74d126a8b to before cdeff10851c37a002d87a035818ebd60fdb74447, ed0de45a1008991fdaa27a0152befcb74d126a8b to before 4729ff0581fbb7ad098b6153b76b6f5aac94618a, ed0de45a1008991fdaa27a0152befcb74d126a8b to before 25ab24df31f7af843c96a38e0781b9165216e1a8, ed0de45a1008991fdaa27a0152befcb74d126a8b to before 689a627d14788ad772e0fa24c2e57a23dbc7ce90, ed0de45a1008991fdaa27a0152befcb74d126a8b to before ad891bb3d079a46a821bf2b8867854645191bab0, 6c2fa855d8178699706b1192db2f1f8102b0ba1e, fbf569d2beee2a4a7a0bc8b619c26101d1211a88, ff71f99d5fb2daf54340e8b290d0bc4e6b4c1d38, 3d988fcddbe7b8673a231958bd2fba61b5a7ced9, 8a430e56a6485267a1b2d3747209d26c54d1a34b, 6bd1ee0a993fc9574ae43c1994c54a60cb23a380, 3.18.139 to before 3.19, 4.4.179 to before 4.5, 4.9.171 to before 4.10, 4.14.114 to before 4.15, 4.19.37 to before 4.20, 5.0.10 to before 5.1
Linux
Linux · 5.1
Linux
Component: Not specified by the source
File: net/netfilter/ipvs/ip_vs_xmit.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-68814
Affected technology
Linux · b9445598d8c60a1379887b957024b71343965f74 to before 2420ef01b2e836fbc05a0a8c73a1016504eb0458, b9445598d8c60a1379887b957024b71343965f74 to before 8f44c4a550570cd5903625133f938c6b51310c9b, b9445598d8c60a1379887b957024b71343965f74 to before 18b99fa603d0df5e1c898699c17d3b92ddc80746, b9445598d8c60a1379887b957024b71343965f74 to before e232269d511566b1f80872256a48593acc1becf4, b9445598d8c60a1379887b957024b71343965f74 to before 7fbfb85b05bc960cc50e09d03e5e562131e48d45, b9445598d8c60a1379887b957024b71343965f74 to before b14fad555302a2104948feaff70503b64c80ac01
Linux
Linux · 5.15
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
Function: returns
File: io_uring/openclose.c, being
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-68815
Affected technology
Linux · f517335a61ff8037b18ba1b0a002c1f82926a934 to before 58fdce6bc005e964f1dbc3ca716f5fe0f68839a2, cd9b50adc6bb9ad3f7d244590a389522215865c4 to before 02783a37cb1c0a2bd9fcba4ff1b81e6e209c7d87, cd9b50adc6bb9ad3f7d244590a389522215865c4 to before 8067db5c95aab9461d23117679338cd8869831fa, cd9b50adc6bb9ad3f7d244590a389522215865c4 to before 2f125ebe47d6369e562f3cbd9b6227cff51eaf34, cd9b50adc6bb9ad3f7d244590a389522215865c4 to before cca2ed931b734fe48139bc6f020e47367346630f, cd9b50adc6bb9ad3f7d244590a389522215865c4 to before 43d9a530c8c094d137159784e7c951c65f11ec6c, cd9b50adc6bb9ad3f7d244590a389522215865c4 to before b1e125ae425aba9b45252e933ca8df52a843ec70, d05330672afe2e142ba97e63bd7c1faef76781bb, 5.10.62 to before 5.10.248, 5.13.14 to before 5.14
Linux
Linux · 5.14
Linux
Component: Not specified by the source
File: net/sched/sch_ets.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68816
Affected technology
Linux · 70dd6fdb8987b14f7b6105f6be0617299e459398 to before 95624b731c490a4b849844269193a233d6d556a0, 70dd6fdb8987b14f7b6105f6be0617299e459398 to before 768d559f466cdd72849110a7ecd76a21d52dcfe3, 70dd6fdb8987b14f7b6105f6be0617299e459398 to before 38ac688b52ef26a88f8bc4fe26d24fdd0ff91e5d, 70dd6fdb8987b14f7b6105f6be0617299e459398 to before 8ac688c0e430dab19f6a9b70df94b1f635612c1a, 70dd6fdb8987b14f7b6105f6be0617299e459398 to before 45bd283b1d69e2c97cddcb9956f0e0261fc4efd7, 70dd6fdb8987b14f7b6105f6be0617299e459398 to before 8c35c2448086870509ede43947845be0833251f0, 70dd6fdb8987b14f7b6105f6be0617299e459398 to before b35966042d20b14e2d83330049f77deec5229749
Linux
Linux · 4.19
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: drivers/net/ethernet/mellanox/mlx5/core/diag/fw_tracer.c, drivers/net/ethernet/mellanox/mlx5/core/diag/fw_tracer.h
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-68817
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-68818
Affected technology
Linux · 231cfa78ec5badd84a1a2b09465bfad1a926aba1 to before b04b3733fff7e94566386b962e4795550fbdfd3d, d6f7377528d2abf338e504126e44439541be8f7d to before 50b097d92c99f718831b8b349722bc79f718ba1b, cd0a1804ac5bab2545ac700c8d0fe9ae9284c567 to before c5c37a821bd1708f26a9522b4a6f47b9f7a20003, 0367076b0817d5c75dfb83001ce7ce5c64d803a9 to before e9e601b7df58ba0c667baf30263331df2c02ffe1, 0367076b0817d5c75dfb83001ce7ce5c64d803a9 to before b10ebbfd59a535c8d22f4ede6e8389622ce98dc0, 0367076b0817d5c75dfb83001ce7ce5c64d803a9 to before 1c728951bc769b795d377852eae1abddad88635d, 0367076b0817d5c75dfb83001ce7ce5c64d803a9 to before b57fbc88715b6d18f379463f48a15b560b087ffe, 9189f20b4c5307c0998682bb522e481b4567a8b8, 415d614344a4f1bbddf55d724fc7eb9ef4b39aad, 5.10.177 to before 5.10.248, 5.15.105 to before 5.15.198, 6.1.22 to before 6.1.160, 5.4.240 to before 5.5, 6.2.9 to before 6.3
Linux
Linux · 6.3
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: drivers/scsi/qla2xxx/qla_os.c
Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68819
Affected technology
Linux · 60688d5e6e6e2ae62f29762d1e3b2aec2dbd3817 to before c2c293ea7b61f12cdaad1e99a5b4efc58c88960a, 60688d5e6e6e2ae62f29762d1e3b2aec2dbd3817 to before c2305b4c5fc15e20ac06c35738e0578eb4323750, 60688d5e6e6e2ae62f29762d1e3b2aec2dbd3817 to before 61f214a878e96e2a8750bf96a98f78c658dba60c, 60688d5e6e6e2ae62f29762d1e3b2aec2dbd3817 to before 4a54d8fcb093761e4c56eb211cf4e39bf8401fa1, 60688d5e6e6e2ae62f29762d1e3b2aec2dbd3817 to before fe3e129ab49806aaaa3f22067ebc75c2dfbe4658, 60688d5e6e6e2ae62f29762d1e3b2aec2dbd3817 to before ac92151ff2494130d9fc686055d6bbb9743a673e, 60688d5e6e6e2ae62f29762d1e3b2aec2dbd3817 to before b91e6aafe8d356086cc621bc03e35ba2299e4788
Linux
Linux · 2.6.28
Linux
Component: Not specified by the source
File: drivers/media/usb/dvb-usb/dtv5100.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-68820
Affected technology
Linux · 76c365fa7e2a8bb85f0190cdb4b8cdc99b2fdce3 to before b72a3476f0c97d02f63a6e9fff127348d55436f6, f737418b6de31c962c7192777ee4018906975383 to before 3d8d22e75f7edfa0b30ff27330fd6a1285d594c3, cf9291a3449b04688b81e32621e88de8f4314b54 to before 190ad0f22ba49f1101182b80e3af50ca2ddfe72f, 362a90cecd36e8a5c415966d0b75b04a0270e4dd to before b5d942922182e82724b7152cb998f540132885ec, eb59cc31b6ea076021d14b04e7faab1636b87d0e to before 5b154e901fda2e98570b8f426a481f5740097dc2, c8e008b60492cf6fd31ef127aea6d02fd3d314cd to before ce5f54c065a4a7cbb92787f4f140917112350142, c8e008b60492cf6fd31ef127aea6d02fd3d314cd to before b97cb7d6a051aa6ebd57906df0e26e9e36c26d14, 6aff941cb0f7d0c897c3698ad2e30672709135e3, 3bc6317033f365ce578eb6039445fb66162722fd, 836e625b03a666cf93ff5be328c8cb30336db872, 5.10.237 to before 5.10.248, 5.15.181 to before 5.15.198, 6.1.135 to before 6.1.160, 6.6.88 to before 6.6.120, 6.12.24 to before 6.12.64, 5.4.293 to before 5.5, 6.13.12 to before 6.14, 6.14.3 to before 6.15
Linux
Linux · 6.15
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: fs/ext4/xattr.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-71064
Affected technology
Linux · e2cb1dec9779ba2d89302a653eb0abaeb8682196 to before c149decd8c18ae6acdd7a6041d74507835cf26e6, e2cb1dec9779ba2d89302a653eb0abaeb8682196 to before bcefdb288eedac96fd2f583298927e9c6c481489, e2cb1dec9779ba2d89302a653eb0abaeb8682196 to before 6cd8a2930df850f4600fe8c57d0662b376520281, e2cb1dec9779ba2d89302a653eb0abaeb8682196 to before 1956d47a03eb625951e9e070db39fe2590e27510, e2cb1dec9779ba2d89302a653eb0abaeb8682196 to before 429f946a7af3fbf08761d218746cd4afa80a7954, e2cb1dec9779ba2d89302a653eb0abaeb8682196 to before 62f28d79a6186a602a9d926a2dbb5b12b6867df7, e2cb1dec9779ba2d89302a653eb0abaeb8682196 to before c2a16269742e176fccdd0ef9c016a233491a49ad
Linux
Linux · 4.16
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: drivers/net/ethernet/hisilicon/hns3/hns3vf/hclgevf_main.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-71066
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-71068
Affected technology
linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux
linux kernel · from 6.0 (inclusive), before 6.6.120 (exclusive)
linux
linux kernel · from 6.12 (inclusive), before 6.12.64 (exclusive)
linux
linux kernel · from 6.18 (inclusive), before 6.18.3 (exclusive)
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
linux kernel · 6.19 · update rc8
linux
Linux · d7cc73972661be4a02a1b09f1d9b3283c6c05154 to before a22316f5e9a29e4b92030bd8fb9435fe0eb1d5c9, d7cc73972661be4a02a1b09f1d9b3283c6c05154 to before 7ba826aae1d43212f3baa53a2175ad949e21926e, d7cc73972661be4a02a1b09f1d9b3283c6c05154 to before 5f140b525180c628db8fa6c897f138194a2de417, d7cc73972661be4a02a1b09f1d9b3283c6c05154 to before da1ccfc4c452541584a4eae89e337cfa21be6d5a, d7cc73972661be4a02a1b09f1d9b3283c6c05154 to before d1bea0ce35b6095544ee82bb54156fc62c067e58
Linux
Linux · 5.11
Linux
Component: Not specified by the source
File: net/sunrpc/xprtrdma/svc_rdma_rw.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-71069
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-71075
Affected technology
linux kernel · from 2.6.19.1 (inclusive), before 5.10.248 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.3 (exclusive)
linux
linux kernel · 2.6.19
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
linux kernel · 6.19 · update rc8
linux
Linux · 2908d778ab3e244900c310974e1fc1c69066e450 to before c8f6f88cd1df35155258285c4f43268b361819df, 2908d778ab3e244900c310974e1fc1c69066e450 to before 278455a82245a572aeb218a6212a416a98e418de, 2908d778ab3e244900c310974e1fc1c69066e450 to before b3e655e52b98a1d3df41c8e42035711e083099f8, 2908d778ab3e244900c310974e1fc1c69066e450 to before e354793a7ab9bb0934ea699a9d57bcd1b48fc27b, 2908d778ab3e244900c310974e1fc1c69066e450 to before a41dc180b6e1229ae49ca290ae14d82101c148c3, 2908d778ab3e244900c310974e1fc1c69066e450 to before 751c19635c2bfaaf2836a533caa3663633066dcf, 2908d778ab3e244900c310974e1fc1c69066e450 to before f6ab594672d4cba08540919a4e6be2e202b60007
Linux
Linux · 2.6.19
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
Function: fails
File: drivers/scsi/aic94xx/aic94xx_init.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-71077
Affected technology
linux kernel · from 5.1.1 (inclusive), before 5.10.248 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.3 (exclusive)
linux
linux kernel · 5.1
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
linux kernel · 6.19 · update rc8
linux
Linux · bcfff8384f6c4e6627676ef07ccad9cfacd67849 to before 8ceee7288152bc121a6bf92997261838c78bfe06, bcfff8384f6c4e6627676ef07ccad9cfacd67849 to before 275c686f1e3cc056ec66c764489ec1fe1e51b950, bcfff8384f6c4e6627676ef07ccad9cfacd67849 to before ceb70d31da5671d298bad94ae6c20e4bbb800f96, bcfff8384f6c4e6627676ef07ccad9cfacd67849 to before d88481653d74d622d1d0d2c9bad845fc2cc6fd23, bcfff8384f6c4e6627676ef07ccad9cfacd67849 to before b69492161c056d36789aee42a87a33c18c8ed5e1, bcfff8384f6c4e6627676ef07ccad9cfacd67849 to before 858344bc9210bea9ab2bdc7e9e331ba84c164e50, bcfff8384f6c4e6627676ef07ccad9cfacd67849 to before faf07e611dfa464b201223a7253e9dc5ee0f3c9e
Linux
Linux · 5.1
Linux
Component: Not specified by the source
File: drivers/char/tpm/tpm-chip.c, drivers/char/tpm/tpm1-cmd.c, drivers/char/tpm/tpm2-cmd.c, include/linux/tpm.h
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-71078
Affected technology
linux kernel · from 4.20.1 (inclusive), before 5.10.248 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.4 (exclusive)
linux
linux kernel · 4.20
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
linux kernel · 6.19 · update rc8
linux
Linux · 5434ae74629af58ad0fc27143a9ea435f7734410 to before 01324c0328181b94cf390bda22ff91c75126ea57, 5434ae74629af58ad0fc27143a9ea435f7734410 to before 2e9a95d60f1df7b57618fd5ef057aef331575bd2, 5434ae74629af58ad0fc27143a9ea435f7734410 to before c9f865022a1823d814032a09906e91e4701a35fc, 5434ae74629af58ad0fc27143a9ea435f7734410 to before b13a3dbfa196af68eae2031f209743735ad416bf, 5434ae74629af58ad0fc27143a9ea435f7734410 to before 895123c309a34d2cfccf7812b41e17261a3a6f37, 5434ae74629af58ad0fc27143a9ea435f7734410 to before 4ae1e46d8a290319f33f71a2710a1382ba5431e8, 5434ae74629af58ad0fc27143a9ea435f7734410 to before 00312419f0863964625d6dcda8183f96849412c6
Linux
Linux · 4.20
Linux
Component: Not specified by the source
File: arch/powerpc/include/asm/book3s/64/mmu-hash.h, arch/powerpc/kernel/process.c, arch/powerpc/mm/book3s64/internal.h, arch/powerpc/mm/book3s64/mmu_context.c, arch/powerpc/mm/book3s64/slb.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-71079
Affected technology
linux kernel · from 4.4.293 (inclusive), before 4.5 (exclusive)
linux
linux kernel · from 4.9.291 (inclusive), before 4.10 (exclusive)
linux
linux kernel · from 4.14.256 (inclusive), before 4.15 (exclusive)
linux
linux kernel · from 4.19.218 (inclusive), before 4.20 (exclusive)
linux
linux kernel · from 5.4.162 (inclusive), before 5.5 (exclusive)
linux
linux kernel · from 5.10.82 (inclusive), before 5.10.248 (exclusive)
linux
linux kernel · from 5.15.5 (inclusive), before 5.15.198 (exclusive)
linux
linux kernel · from 5.16.1 (inclusive), before 6.1.160 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.4 (exclusive)
linux
linux kernel · 5.16
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
linux kernel · 6.19 · update rc8
linux
Linux · 73a0d12114b4bc1a9def79a623264754b9df698e to before 2e0831e9fc46a06daa6d4d8d57a2738e343130c3, 8a9c61c3ef187d8891225f9b932390670a43a0d3 to before e02a1c33f10a0ed3aba855ab8ae2b6c4c5be8012, 3e3b5dfcd16a3e254aab61bd1e8c417dd4503102 to before ee41f4f3ccf8cd6ba3732e867abbec7e6d8d12e5, 3e3b5dfcd16a3e254aab61bd1e8c417dd4503102 to before 6b93c8ab6f6cda8818983a4ae3fcf84b023037b4, 3e3b5dfcd16a3e254aab61bd1e8c417dd4503102 to before 8fc4632fb508432895430cd02b38086bdd649083, 3e3b5dfcd16a3e254aab61bd1e8c417dd4503102 to before f3a8a7c1aa278f2378b2f3a10500c6674dffdfda, 3e3b5dfcd16a3e254aab61bd1e8c417dd4503102 to before 1ab526d97a57e44d26fadcc0e9adeb9c0c0182f5, 5ef16d2d172ee56714cff37cd005b98aba08ef5a, ff169909eac9e00bf1aa0af739ba6ddfb1b1d135, 47244ac0b65bd74cc70007d8e1bac68bd2baad19, c45cea83e13699bdfd47842e04d09dd43af4c371, 307d2e6cebfca9d92f86c8e2c8e3dd4a8be46ba6, 5.10.82 to before 5.10.248, 5.15.5 to before 5.15.198, 4.4.293 to before 4.5, 4.9.291 to before 4.10, 4.14.256 to before 4.15, 4.19.218 to before 4.20, 5.4.162 to before 5.5
Linux
Linux · 5.16
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: net/nfc/core.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-71081
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-71082
Affected technology
linux kernel · from 3.7.1 (inclusive), before 5.15.198 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.4 (exclusive)
linux
linux kernel · 3.7
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
linux kernel · 6.19 · update rc8
linux
Linux · 98921dbd00c4e2e4bdd56423cb5edf98d57b45f7 to before fff9206b0907252a41eb12b7c1407b9347df18b1, 98921dbd00c4e2e4bdd56423cb5edf98d57b45f7 to before cca0e9206e3bcc63cd3e72193e60149165d493cc, 98921dbd00c4e2e4bdd56423cb5edf98d57b45f7 to before c0ecb3e4451fe94f4315e6d09c4046dfbc42090b, 98921dbd00c4e2e4bdd56423cb5edf98d57b45f7 to before 1e54c19eaf84ba652c4e376571093e58e144b339, 98921dbd00c4e2e4bdd56423cb5edf98d57b45f7 to before fdf7c640fb8a44a59b0671143d8c2f738bc48003, 98921dbd00c4e2e4bdd56423cb5edf98d57b45f7 to before 252714f1e8bdd542025b16321c790458014d6880
Linux
Linux · 3.7
Linux
Component: Not specified by the source
File: drivers/bluetooth/btusb.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-71083
Affected technology
linux kernel · from 4.14.1 (inclusive), before 5.15.198 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.4 (exclusive)
linux
linux kernel · 4.14
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
linux kernel · 6.19 · update rc8
linux
Linux · 09ac4fcb3f255e9225967c75f5893325c116cdbe to before 47a85604a761005d255ae38115ee630cc6931756, 09ac4fcb3f255e9225967c75f5893325c116cdbe to before 4b9944493c6d92d7b29cfd83aaf3deb842b8da79, 09ac4fcb3f255e9225967c75f5893325c116cdbe to before 3d004f7341d4898889801ebb2ef61ffca610dd6f, 09ac4fcb3f255e9225967c75f5893325c116cdbe to before 5a81095d3e1b521ac7cfe3b14d5f149bace3d6e0, 09ac4fcb3f255e9225967c75f5893325c116cdbe to before b94182b3d7228aec18d069cba56d5982e9bfe1b1, 09ac4fcb3f255e9225967c75f5893325c116cdbe to before 491adc6a0f9903c32b05f284df1148de39e8e644
Linux
Linux · 4.14
Linux
Component: Not specified by the source
File: drivers/gpu/drm/ttm/ttm_bo_vm.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-71084
Affected technology
linux kernel · from 5.10.20 (inclusive), before 5.10.248 (exclusive)
linux
linux kernel · from 5.11.3 (inclusive), before 5.12 (exclusive)
linux
linux kernel · from 5.12.1 (inclusive), before 5.15.198 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.4 (exclusive)
linux
linux kernel · 5.12
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
linux kernel · 6.19 · update rc8
linux
Linux · 60d613b39e8d0c9f3b526e9c96445422b4562d76 to before d5ce588a9552878859a4d44b70b724216c188a5f, fe454dc31e84f8c14cb8942fcb61666c9f40745b to before abf38398724ecc888f62c678d288da40d11878af, fe454dc31e84f8c14cb8942fcb61666c9f40745b to before ab668a58c4a2ccb6d54add7a76f2f955d15d0196, fe454dc31e84f8c14cb8942fcb61666c9f40745b to before c0acdee513239e1d6e1b490f56be0e6837dfd162, fe454dc31e84f8c14cb8942fcb61666c9f40745b to before 5cb34bb5fd726491b809efbeb5cfd63ae5bf9cf3, fe454dc31e84f8c14cb8942fcb61666c9f40745b to before 3ba6d01c4b3c584264dc733c6a2ecc5bbc8e0bb5, fe454dc31e84f8c14cb8942fcb61666c9f40745b to before 57f3cb6c84159d12ba343574df2115fb18dd83ca, a3262b3884dd67b4c5632ce7cdf9cff9d1a575d4, 5.10.20 to before 5.10.248, 5.11.3 to before 5.12
Linux
Linux · 5.12
Linux
Component: Not specified by the source
File: drivers/infiniband/core/cma.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-71085
Affected technology
linux kernel · from 4.8.1 (inclusive), before 5.10.248 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.4 (exclusive)
linux
linux kernel · 4.8
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
linux kernel · 6.19 · update rc8
linux
Linux · 2917f57b6bc15cc6787496ee5f2fdf17f0e9b7d3 to before 86f365897068d09418488165a68b23cb5baa37f2, 2917f57b6bc15cc6787496ee5f2fdf17f0e9b7d3 to before 6b7522424529556c9cbc15e15e7bd4eeae310910, 2917f57b6bc15cc6787496ee5f2fdf17f0e9b7d3 to before 2bb759062efa188ea5d07242a43e5aa5464bbae1, 2917f57b6bc15cc6787496ee5f2fdf17f0e9b7d3 to before c53aa6a5086f03f19564096ee084a202a8c738c0, 2917f57b6bc15cc6787496ee5f2fdf17f0e9b7d3 to before bf3709738d8a8cc6fa275773170c5c29511a0b24, 2917f57b6bc15cc6787496ee5f2fdf17f0e9b7d3 to before 73744ad5696dce0e0f43872aba8de6a83d6ad570, 2917f57b6bc15cc6787496ee5f2fdf17f0e9b7d3 to before 58fc7342b529803d3c221101102fe913df7adb83
Linux
Linux · 4.8
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: net/ipv6/calipso.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-71086
Affected technology
linux kernel · from 4.19.304 (inclusive), before 4.20 (exclusive)
linux
linux kernel · from 5.4.266 (inclusive), before 5.5 (exclusive)
linux
linux kernel · from 5.10.206 (inclusive), before 5.10.248 (exclusive)
linux
linux kernel · from 5.15.146 (inclusive), before 5.15.198 (exclusive)
linux
linux kernel · from 6.1.70 (inclusive), before 6.1.160 (exclusive)
linux
linux kernel · from 6.6.9 (inclusive), before 6.6.120 (exclusive)
linux
linux kernel · from 6.7.1 (inclusive), before 6.12.64 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.4 (exclusive)
linux
linux kernel · 6.7
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
linux kernel · 6.19 · update rc8
linux
Linux · 12e5a4719c99d7f4104e7e962393dfb8baa1c591 to before 819fb41ae54960f66025802400c9d3935eef4042, c0e527c532a07556ca44642f5873b002c44da22c to before ed2639414d43ba037f798eaf619e878309310451, 3e0d1585799d8a991eba9678f297fd78d9f1846e to before 1418c12cd3bba79dc56b57b61c99efe40f579981, ffced26692f83212aa09d0ece0213b23cc2f611d to before 9f6185a32496834d6980b168cffcccc2d6b17280, 64b8bc7d5f1434c636a40bdcfcd42b278d1714be to before b409ba9e1e63ccf3ab4cc061e33c1f804183543e, 64b8bc7d5f1434c636a40bdcfcd42b278d1714be to before 92d900aac3a5721fb54f3328f1e089b44a861c38, 64b8bc7d5f1434c636a40bdcfcd42b278d1714be to before 6595beb40fb0ec47223d3f6058ee40354694c8e4, bd7de4734535140fda33240c2335a07fdab6f88e, b10265532df7bc3666bc53261b7f03f0fd14b1c9, 5.10.206 to before 5.10.248, 5.15.146 to before 5.15.198, 6.1.70 to before 6.1.160, 6.6.9 to before 6.6.120, 4.19.304 to before 4.20, 5.4.266 to before 5.5
Linux
Linux · 6.7
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: net/rose/af_rose.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-71087
Affected technology
linux kernel · from 4.7.1 (inclusive), before 5.10.248 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.4 (exclusive)
linux
linux kernel · 4.7
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
linux kernel · 6.19 · update rc8
linux
Linux · 43a3d9ba34c9ca313573201d3f45de5ab3494cec to before ceb8459df28d22c225a82d74c0f725f2a935d194, 43a3d9ba34c9ca313573201d3f45de5ab3494cec to before 5bb18bfd505ca1affbca921462c350095a6c798c, 43a3d9ba34c9ca313573201d3f45de5ab3494cec to before d7369dc8dd7cbf5cee3a22610028d847b6f02982, 43a3d9ba34c9ca313573201d3f45de5ab3494cec to before 18de0e41d69d97fab10b91fecf10ae78a5e43232, 43a3d9ba34c9ca313573201d3f45de5ab3494cec to before f36de3045d006e6d9be1be495f2ed88d1721e752, 43a3d9ba34c9ca313573201d3f45de5ab3494cec to before 3095228e1320371e143835d0cebeef1a8a754c66, 43a3d9ba34c9ca313573201d3f45de5ab3494cec to before 6daa2893f323981c7894c68440823326e93a7d61
Linux
Linux · 4.7
Linux
Component: Not specified by the source
File: drivers/net/ethernet/intel/iavf/iavf_main.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-71091
Affected technology
linux kernel · from 3.11.1 (inclusive), before 5.10.248 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.4 (exclusive)
linux
linux kernel · 3.11
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
linux kernel · 6.19 · update rc8
linux
Linux · 6c31ff366c1116823e77019bae3e92e9d77a49f4 to before 25029e813c4aae5fcf7118e8dd5c56e382b9a1a3, 6c31ff366c1116823e77019bae3e92e9d77a49f4 to before f820e438b8ec2a8354e70e75145f05fe45500d97, 6c31ff366c1116823e77019bae3e92e9d77a49f4 to before 53a727a8bfd78c739e130a781192d0f6f8e03d39, 6c31ff366c1116823e77019bae3e92e9d77a49f4 to before 6bfb62b6010a16112dcae52f490e5e0e6abe12a3, 6c31ff366c1116823e77019bae3e92e9d77a49f4 to before 107d245f84cb4f55f597d31eda34b42a2b7d6952, 6c31ff366c1116823e77019bae3e92e9d77a49f4 to before b71187648ef2349254673d0523fdf96d1fe3d758, 6c31ff366c1116823e77019bae3e92e9d77a49f4 to before 932ac51d9953eaf77a1252f79b656d4ca86163c6
Linux
Linux · 3.11
Linux
Component: Not specified by the source
File: drivers/net/team/team_core.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-71093
Affected technology
linux kernel · from 3.18.1 (inclusive), before 5.10.248 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.4 (exclusive)
linux
linux kernel · 3.18
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
linux kernel · 6.19 · update rc8
linux
Linux · 2037110c96d5f1dd71453fcd0d54e79be12a352b to before 4ccfa56f272241e8d8e2c38191fdbb03df489d80, 2037110c96d5f1dd71453fcd0d54e79be12a352b to before 278b7cfe0d4da7502c7fd679b15032f014c92892, 2037110c96d5f1dd71453fcd0d54e79be12a352b to before ad7a2a45e2417ac54089926b520924f8f0d91aea, 2037110c96d5f1dd71453fcd0d54e79be12a352b to before 2c4c0c09f9648ba766d399917d420d03e7b3e1f8, 2037110c96d5f1dd71453fcd0d54e79be12a352b to before 26c8bebc2f25288c2bcac7bc0a7662279a0e817c, 2037110c96d5f1dd71453fcd0d54e79be12a352b to before ee7c125fb3e8b04dd46510130b9fc92380e5d578, 2037110c96d5f1dd71453fcd0d54e79be12a352b to before 9c72a5182ed92904d01057f208c390a303f00a0f
Linux
Linux · 3.18
Linux
Component: Not specified by the source
File: drivers/net/ethernet/intel/e1000/e1000_main.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 9.1/10) rates confidentiality and availability impact as high; integrity impact as none. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-71094
Affected technology
linux kernel · from 5.13.13 (inclusive), before 5.14 (exclusive)
linux
linux kernel · from 5.14.1 (inclusive), before 5.15.198 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.4 (exclusive)
linux
linux kernel · 5.14
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
linux kernel · 6.19 · update rc8
linux
Linux · 7e88b11a862afe59ee0c365123ea5fb96a26cb3b to before fc96018f09f8d30586ca6582c5045a84eafef146, 7e88b11a862afe59ee0c365123ea5fb96a26cb3b to before f5f4f30f3811d37e1aa48667c36add74e5a8d99f, 7e88b11a862afe59ee0c365123ea5fb96a26cb3b to before 38722e69ee64dbb020028c93898d25d6f4c0e0b2, 7e88b11a862afe59ee0c365123ea5fb96a26cb3b to before 98a12c2547a44a5f03f35c108d2022cc652cbc4d, 7e88b11a862afe59ee0c365123ea5fb96a26cb3b to before bf8a0f3b787ca7c5889bfca12c60c483041fbee3, 7e88b11a862afe59ee0c365123ea5fb96a26cb3b to before a1e077a3f76eea0dc671ed6792e7d543946227e8, 4e4f3cb41d687bd64cd03358862b23c84d82329e, 5.13.13 to before 5.14
Linux
Linux · 5.14
Linux
Component: Not specified by the source
File: drivers/net/usb/asix_common.c, drivers/net/usb/ax88172a.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-71096
Affected technology
linux kernel · from 4.7.1 (inclusive), before 5.10.248 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.4 (exclusive)
linux
linux kernel · 4.7
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
linux kernel · 6.19 · update rc8
linux
Linux · ae43f8286730d1f2d241c34601df59f6d2286ac4 to before 376f46c8983458ead26cac83aa897a0b78491831, ae43f8286730d1f2d241c34601df59f6d2286ac4 to before bfe10318fc23e0b3f1d0a18dad387d29473a624d, ae43f8286730d1f2d241c34601df59f6d2286ac4 to before 45532638de5da24c201aa2a9b3dd4b054064de7b, ae43f8286730d1f2d241c34601df59f6d2286ac4 to before 9d85524789c2f17c0e87de8d596bcccc3683a1fc, ae43f8286730d1f2d241c34601df59f6d2286ac4 to before acadd4097d25d6bd472bcb3f9f3eba2b5105d1ec, ae43f8286730d1f2d241c34601df59f6d2286ac4 to before 0b948afc1ded88b3562c893114387f34389eeb94, ae43f8286730d1f2d241c34601df59f6d2286ac4 to before a7b8e876e0ef0232b8076972c57ce9a7286b47ca
Linux
Linux · 4.7
Linux
Component: Not specified by the source
File: drivers/infiniband/core/addr.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-71097
Affected technology
linux kernel · from 5.3.1 (inclusive), before 5.10.248 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.4 (exclusive)
linux
linux kernel · 5.3
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
linux kernel · 6.19 · update rc8
linux
Linux · 493ced1ac47c48bb86d9d4e8e87df8592be85a0e to before 5de7ad7e18356e39e8fbf7edd185a5faaf4f385a, 493ced1ac47c48bb86d9d4e8e87df8592be85a0e to before 33ff5c207c873215e54e6176624ed57423cb7dea, 493ced1ac47c48bb86d9d4e8e87df8592be85a0e to before 30386e090c49e803c0616a7147e43409c32a2b0e, 493ced1ac47c48bb86d9d4e8e87df8592be85a0e to before 5979338c83012110ccd45cae6517591770bfe536, 493ced1ac47c48bb86d9d4e8e87df8592be85a0e to before ee4183501ea556dca31f5ffd8690aa9fd25b609f, 493ced1ac47c48bb86d9d4e8e87df8592be85a0e to before e3fc381320d04e4a74311e576a86cac49a16fc43, 493ced1ac47c48bb86d9d4e8e87df8592be85a0e to before ac782f4e3bfcde145b8a7f8af31d9422d94d172a
Linux
Linux · 5.3
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: net/ipv4/fib_trie.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-71098
Affected technology
linux kernel · from 3.7.1 (inclusive), before 5.10.248 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.4 (exclusive)
linux
linux kernel · 3.7
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
linux kernel · 6.19 · update rc8
linux
Linux · c12b395a46646bab69089ce7016ac78177f6001f to before 17e7386234f740f3e7d5e58a47b5847ea34c3bc2, c12b395a46646bab69089ce7016ac78177f6001f to before 41a1a3140aff295dee8063906f70a514548105e8, c12b395a46646bab69089ce7016ac78177f6001f to before adee129db814474f2f81207bd182bf343832a52e, c12b395a46646bab69089ce7016ac78177f6001f to before 1717357007db150c2d703f13f5695460e960f26c, c12b395a46646bab69089ce7016ac78177f6001f to before 5fe210533e3459197eabfdbf97327dacbdc04d60, c12b395a46646bab69089ce7016ac78177f6001f to before 91a2b25be07ce1a7549ceebbe82017551d2eec92, c12b395a46646bab69089ce7016ac78177f6001f to before db5b4e39c4e63700c68a7e65fc4e1f1375273476
Linux
Linux · 3.7
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: net/ipv6/ip6_gre.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-71102
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-71104
Affected technology
linux kernel · from 4.14.45 (inclusive), before 4.15 (exclusive)
linux
linux kernel · from 4.16.13 (inclusive), before 4.17 (exclusive)
linux
linux kernel · from 4.17.1 (inclusive), before 5.10.248 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.3 (exclusive)
linux
linux kernel · 4.17
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
linux kernel · 6.19 · update rc8
linux
Linux · d8f2f498d9ed0c5010bc1bbc1146f94c8bf9f8cc to before 786ed625c125c5cd180d6aaa37e653e3e4ffb8d9, d8f2f498d9ed0c5010bc1bbc1146f94c8bf9f8cc to before d2da0df7bbc4fb4fd7d0a1da704f81a09c72fe73, d8f2f498d9ed0c5010bc1bbc1146f94c8bf9f8cc to before 807dbe8f3862fa7c164155857550ce94b36a11b9, d8f2f498d9ed0c5010bc1bbc1146f94c8bf9f8cc to before 7b54ccef865e0aa62e4871d4ada2ba4b9dcb8bed, d8f2f498d9ed0c5010bc1bbc1146f94c8bf9f8cc to before e746e51947053a02af2ea964593dc4887108d379, d8f2f498d9ed0c5010bc1bbc1146f94c8bf9f8cc to before e23f46f1a971c73dad2fd63e1408696114ddebe2, d8f2f498d9ed0c5010bc1bbc1146f94c8bf9f8cc to before 18ab3fc8e880791aa9f7c000261320fc812b5465, 421e1fadb0b0a648cc75afd5b3c826fa7daeaffc, 5a69b7b69beae9bb86e7e1b095685087976cba47, 4.14.45 to before 4.15, 4.16.13 to before 4.17
Linux
Linux · 4.17
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: arch/x86/kvm/lapic.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-71105
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-71108
Affected technology
linux kernel · from 4.13.1 (inclusive), before 5.10.248 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.3 (exclusive)
linux
linux kernel · 4.13
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
linux kernel · 6.19 · update rc8
linux
Linux · c1b0bc2dabfa884dea49c02adaf3cd6b52b33d2f to before 07c8d2a109d847775b3b4e2c3294c8e1eea75432, c1b0bc2dabfa884dea49c02adaf3cd6b52b33d2f to before 58941bbb0050e365a98c64f1fc4a9a0ac127dba6, c1b0bc2dabfa884dea49c02adaf3cd6b52b33d2f to before f72f97d0aee4a993a35f2496bca5efd24827235d, c1b0bc2dabfa884dea49c02adaf3cd6b52b33d2f to before 914605b0de8128434eafc9582445306830748b93, c1b0bc2dabfa884dea49c02adaf3cd6b52b33d2f to before 3042a57a8e8bce4a3100c3f6f03dc372aab24943, c1b0bc2dabfa884dea49c02adaf3cd6b52b33d2f to before 132fe187e0d940f388f839fe2cde9b84106ad20d, c1b0bc2dabfa884dea49c02adaf3cd6b52b33d2f to before 30cd2cb1abf4c4acdb1ddb468c946f68939819fb
Linux
Linux · 4.13
Linux
Component: Not specified by the source
File: drivers/usb/typec/ucsi/ucsi.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-71111
Affected technology
linux kernel · from 2.6.18.1 (inclusive), before 5.10.248 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.3 (exclusive)
linux
linux kernel · 2.6.18
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
linux kernel · 6.19 · update rc8
linux
Linux · 9873964d6eb24bd0205394f9b791de9eddbcb855 to before 3dceb68f6ad33156032ef4da21a93d84059cca6d, 9873964d6eb24bd0205394f9b791de9eddbcb855 to before bf5b03227f2e6d4360004886d268f9df8993ef8f, 9873964d6eb24bd0205394f9b791de9eddbcb855 to before f2b579a0c37c0df19603d719894a942a295f634a, 9873964d6eb24bd0205394f9b791de9eddbcb855 to before f94800fbc26ccf7c81eb791707b038a57aa39a18, 9873964d6eb24bd0205394f9b791de9eddbcb855 to before a9fb6e8835a22f5796c1182ed612daed3fd273af, 9873964d6eb24bd0205394f9b791de9eddbcb855 to before c8cf0c2bdcccc6634b6915ff793b844e12436680, 9873964d6eb24bd0205394f9b791de9eddbcb855 to before 670d7ef945d3a84683594429aea6ab2cdfa5ceb4
Linux
Linux · 2.6.18
Linux
Component: Not specified by the source
File: drivers/hwmon/w83791d.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-71112
Affected technology
linux kernel · from 5.3.1 (inclusive), before 5.10.248 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.3 (exclusive)
linux
linux kernel · 5.3
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
linux kernel · 6.19 · update rc8
linux
Linux · fe4144d47eef8453459c53a34e9d5940a3e6c219 to before 46c7d9fe8dd869ea5de666aba8c1ec1061ca44a8, fe4144d47eef8453459c53a34e9d5940a3e6c219 to before 42c91dfa772c57de141e5a55a187ac760c0fd7e1, fe4144d47eef8453459c53a34e9d5940a3e6c219 to before 00e56a7706e10b3d00a258d81fcb85a7e96372d6, fe4144d47eef8453459c53a34e9d5940a3e6c219 to before b7b4f3bf118f51b67691a55b464f04452e5dc6fc, fe4144d47eef8453459c53a34e9d5940a3e6c219 to before 95cca255a7a5ad782639ff0298c2a486707d1046, fe4144d47eef8453459c53a34e9d5940a3e6c219 to before 91a51d01be5c9f82c12c2921ca5cceaa31b67128, fe4144d47eef8453459c53a34e9d5940a3e6c219 to before 6ef935e65902bfed53980ad2754b06a284ea8ac1
Linux
Linux · 5.3
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_main.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-71113
Affected technology
linux kernel · from 2.6.38.1 (inclusive), before 5.10.248 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.3 (exclusive)
linux
linux kernel · 2.6.38
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
linux kernel · 6.19 · update rc8
linux
Linux · fe869cdb89c95d060c77eea20204d6c91f233b53 to before e125c8e346e4eb7b3e854c862fcb4392bc13ddba, fe869cdb89c95d060c77eea20204d6c91f233b53 to before 543bf004e4eafbb302b1e6c78570d425d2ca13a0, fe869cdb89c95d060c77eea20204d6c91f233b53 to before f81244fd6b14fecfa93b66b6bb1d59f96554e550, fe869cdb89c95d060c77eea20204d6c91f233b53 to before 84238876e3b3b262cf62d5f4d1338e983fb27010, fe869cdb89c95d060c77eea20204d6c91f233b53 to before 5a4b65523608974a81edbe386f8a667a3e10c726, fe869cdb89c95d060c77eea20204d6c91f233b53 to before 51a5ab36084f3251ef87eda3e6a6236f6488925e, fe869cdb89c95d060c77eea20204d6c91f233b53 to before 6f6e309328d53a10c0fe1f77dec2db73373179b6
Linux
Linux · 2.6.38
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: crypto/af_alg.c, crypto/algif_hash.c, crypto/algif_rng.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-71114
Affected technology
linux kernel · from 3.3.1 (inclusive), before 5.10.248 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.3 (exclusive)
linux
linux kernel · 3.3
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
linux kernel · 6.19 · update rc8
linux
Linux · dc3c56b703dad4aec8a9b3dd86f03a90d0c26a2d to before 1d56025a3af50db0f3da2792f41eb9943eee5324, dc3c56b703dad4aec8a9b3dd86f03a90d0c26a2d to before c7b986adc9e9336066350542ac5a2005d305ae78, dc3c56b703dad4aec8a9b3dd86f03a90d0c26a2d to before 47c910965c936724070d2a8094a4c3ed8f452856, dc3c56b703dad4aec8a9b3dd86f03a90d0c26a2d to before d2c7c90aca7b37f60f16b2bedcfeb16204f2f35d, dc3c56b703dad4aec8a9b3dd86f03a90d0c26a2d to before f7b6370d0fbee06a867037d675797a606cb62e57, dc3c56b703dad4aec8a9b3dd86f03a90d0c26a2d to before c6a2dd4f2e4e6cbdfe7a1618160281af897b75db, dc3c56b703dad4aec8a9b3dd86f03a90d0c26a2d to before 7aa31ee9ec92915926e74731378c009c9cc04928
Linux
Linux · 3.3
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: drivers/watchdog/via_wdt.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-71116
Affected technology
linux kernel · from 3.9.1 (inclusive), before 5.10.248 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.3 (exclusive)
linux
linux kernel · 3.9
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
linux kernel · 6.19 · update rc8
linux
Linux · 4f6a7e5ee1393ec4b243b39dac9f36992d161540 to before d061be4c8040ffb1110d537654a038b8b6ad39d2, 4f6a7e5ee1393ec4b243b39dac9f36992d161540 to before 145d140abda80e33331c5781d6603014fa75d258, 4f6a7e5ee1393ec4b243b39dac9f36992d161540 to before c82e39ff67353a5a6cbc07b786b8690bd2c45aaa, 4f6a7e5ee1393ec4b243b39dac9f36992d161540 to before e927ab132b87ba3f076705fc2684d94b24201ed1, 4f6a7e5ee1393ec4b243b39dac9f36992d161540 to before 5d0d8c292531fe356c4e94dcfdf7d7212aca9957, 4f6a7e5ee1393ec4b243b39dac9f36992d161540 to before 2acb8517429ab42146c6c0ac1daed1f03d2fd125, 4f6a7e5ee1393ec4b243b39dac9f36992d161540 to before 8c738512714e8c0aa18f8a10c072d5b01c83db39
Linux
Linux · 3.9
Linux
Component: Not specified by the source
File: net/ceph/osdmap.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 9.1/10) rates confidentiality and availability impact as high; integrity impact as none. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-71118
Affected technology
linux kernel · from 2.6.12.1 (inclusive), before 5.10.248 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.3 (exclusive)
linux
linux kernel · 2.6.12
linux
linux kernel · 2.6.12 · update rc2
linux
linux kernel · 2.6.12 · update rc3
linux
linux kernel · 2.6.12 · update rc4
linux
linux kernel · 2.6.12 · update rc5
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
linux kernel · 6.19 · update rc8
linux
Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b84edef48cc8afb41150949a87dcfa81bc95b53e, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ecb296286c8787895625bd4c53e9478db4ae139c, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7f9b951ed11842373851dd3c91860778356d62d3, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1bc34293dfbd266c29875206849b4f8e8177e6df, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 0d8bb08126920fd4b12dbf32d9250757c9064b36, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f91dad0a3b381244183ffbea4cec5a7a69d6f41e, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 9d6c58dae8f6590c746ac5d0012ffe14a77539f0
Linux
Linux · 2.6.12
Linux
Component: Not specified by the source
File: drivers/acpi/acpica/nswalk.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-71120
Affected technology
linux kernel · from 4.19.99 (inclusive), before 4.20 (exclusive)
linux
linux kernel · from 5.4.15 (inclusive), before 5.5 (exclusive)
linux
linux kernel · from 5.5.1 (inclusive), before 5.10.248 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.3 (exclusive)
linux
linux kernel · 5.5
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
linux kernel · 6.19 · update rc8
linux
Linux · 5866efa8cbfbadf3905072798e96652faf02dbe8 to before a8f1e445ce3545c90d69c9e8ff8f7821825fe810, 5866efa8cbfbadf3905072798e96652faf02dbe8 to before 4dedb6a11243a5c9eb9dbb97bca3c98bd725e83d, 5866efa8cbfbadf3905072798e96652faf02dbe8 to before f9e53f69ac3bc4ef568b08d3542edac02e83fefd, 5866efa8cbfbadf3905072798e96652faf02dbe8 to before 7452d53f293379e2c38cfa8ad0694aa46fc4788b, 5866efa8cbfbadf3905072798e96652faf02dbe8 to before a2c6f25ab98b423f99ccd94874d655b8bcb01a19, 5866efa8cbfbadf3905072798e96652faf02dbe8 to before 1c8bb965e9b0559ff0f5690615a527c30f651dd8, 5866efa8cbfbadf3905072798e96652faf02dbe8 to before d4b69a6186b215d2dc1ebcab965ed88e8d41768d, 66ed7b413d31c6ff23901ac4443b1cc1af2f6113, 7be8c165dc81564705e8e0b72d398ef708f67eaa, 4.19.99 to before 4.20, 5.4.15 to before 5.5
Linux
Linux · 5.5
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: net/sunrpc/auth_gss/svcauth_gss.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-71121
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-71125
Affected technology
linux kernel · from 4.17.1 (inclusive), before 5.10.248 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.3 (exclusive)
linux
linux kernel · 4.17
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
linux kernel · 6.19 · update rc8
linux
Linux · 4b147936fa509650beaf638b331573c23ba4d609 to before 6819bc6285c0ff835f67cfae7efebc03541782f6, 4b147936fa509650beaf638b331573c23ba4d609 to before 6d15f08e6d8d4b4fb02d90805ea97f3e2c1d6fbc, 4b147936fa509650beaf638b331573c23ba4d609 to before f7305697b60d79bc69c0a6e280fc931b4e8862dd, 4b147936fa509650beaf638b331573c23ba4d609 to before 65b1971147ec12f0b1cee0811c859a3d7d9b04ce, 4b147936fa509650beaf638b331573c23ba4d609 to before 3437c775bf209c674ad66304213b6b3c3b1b3f69, 4b147936fa509650beaf638b331573c23ba4d609 to before 6df47e5bb9b62d72f186f826ab643ea1856877c7, 4b147936fa509650beaf638b331573c23ba4d609 to before ef7f38df890f5dcd2ae62f8dbde191d72f3bebae
Linux
Linux · 4.17
Linux
Component: Not specified by the source
File: kernel/trace/trace_events.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-71127
Affected technology
linux kernel · from 5.7.1 (inclusive), before 5.10.248 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.65 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.4 (exclusive)
linux
linux kernel · 5.7
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
linux kernel · 6.19 · update rc8
linux
Linux · af2d14b01c32d7cba65f73503586e5b621afb139 to before be0974be5c42584e027883ac2af7dab5e950098c, af2d14b01c32d7cba65f73503586e5b621afb139 to before 0a59a3895f804469276d188effa511c72e752f35, af2d14b01c32d7cba65f73503586e5b621afb139 to before 88aab153d1528bc559292a12fb5105ee97528e1f, af2d14b01c32d7cba65f73503586e5b621afb139 to before 6e5bff40bb38741e40c33043ba0816fba5f93661, af2d14b01c32d7cba65f73503586e5b621afb139 to before 7b240a8935d554ad36a52c2c37c32039f9afaef2, af2d14b01c32d7cba65f73503586e5b621afb139 to before a21704df4024708be698fb3fd5830d5b113b70e0, af2d14b01c32d7cba65f73503586e5b621afb139 to before 193d18f60588e95d62e0f82b6a53893e5f2f19f8
Linux
Linux · 5.7
Linux
Component: Not specified by the source
File: net/mac80211/rx.c
Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality impact as none; integrity impact as low; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-71131
Affected technology
linux kernel · from 2.6.25.1 (inclusive), before 5.10.248 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.4 (exclusive)
linux
linux kernel · 2.6.25
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
linux kernel · 6.19 · update rc8
linux
Linux · 0a270321dbf948963aeb0e8382fe17d2c2eb3771 to before 18202537856e0fae079fed2c9308780bcff2bb9d, 0a270321dbf948963aeb0e8382fe17d2c2eb3771 to before baf0e2d1e03ddb04781dfe7f22a654d3611f69b2, 0a270321dbf948963aeb0e8382fe17d2c2eb3771 to before 50f196d2bbaee4ab2494bb1b0d294deba292951a, 0a270321dbf948963aeb0e8382fe17d2c2eb3771 to before 0279978adec6f1296af66b642cce641c6580be46, 0a270321dbf948963aeb0e8382fe17d2c2eb3771 to before ccbb96434d88e32358894c879457b33f7508e798, 0a270321dbf948963aeb0e8382fe17d2c2eb3771 to before 5476f7f8a311236604b78fcc5b2a63b3a61b0169, 0a270321dbf948963aeb0e8382fe17d2c2eb3771 to before 50fdb78b7c0bcc550910ef69c0984e751cac72fa
Linux
Linux · 2.6.25
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: crypto/seqiv.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-71132
Affected technology
linux kernel · from 5.15.1 (inclusive), before 5.15.198 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.4 (exclusive)
linux
linux kernel · 5.15
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
linux kernel · 6.19 · update rc8
linux
Linux · 342a93247e0837101f27bbcca26f402902df98dc to before 1c4cb705e733250d13243f6a69b8b5a92e39b9f6, 342a93247e0837101f27bbcca26f402902df98dc to before 9d222141b00156509d67d80c771fbefa92c43ace, 342a93247e0837101f27bbcca26f402902df98dc to before ef277ae121b3249c99994652210a326b52d527b0, 342a93247e0837101f27bbcca26f402902df98dc to before 36561b86cb2501647662cfaf91286dd6973804a6, 342a93247e0837101f27bbcca26f402902df98dc to before b6018d5c1a8f09d5efe4d6961d7ee45fdf3a7ce3, 342a93247e0837101f27bbcca26f402902df98dc to before 6402078bd9d1ed46e79465e1faaa42e3458f8a33
Linux
Linux · 5.15
Linux
Component: Not specified by the source
File: drivers/net/ethernet/smsc/smc91x.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-71133
Affected technology
linux kernel · from 5.14.1 (inclusive), before 5.15.198 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.4 (exclusive)
linux
linux kernel · 5.14
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
linux kernel · 6.19 · update rc8
linux
Linux · 915cc7ac0f8e2a23675ee896e87f17c7d3c47089 to before db93ae6fa66f1c61ae63400191195e3ee58021da, 915cc7ac0f8e2a23675ee896e87f17c7d3c47089 to before 305c02e541befe4a44ffde30ed374970f41aeb6c, 915cc7ac0f8e2a23675ee896e87f17c7d3c47089 to before fc23d05f0b3fb4d80657e7afebae2cae686b31c8, 915cc7ac0f8e2a23675ee896e87f17c7d3c47089 to before bf197c7c79ef6458d1ee84dd7db251b51784885f, 915cc7ac0f8e2a23675ee896e87f17c7d3c47089 to before d9b9affd103f51b42322da4ed5ac025b560bc354, 915cc7ac0f8e2a23675ee896e87f17c7d3c47089 to before 6f05611728e9d0ab024832a4f1abb74a5f5d0bb0
Linux
Linux · 5.14
Linux
Component: Not specified by the source
File: drivers/infiniband/hw/irdma/utils.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-71136
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-71137
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-71147
Affected technology
linux kernel · from 5.13 (inclusive), before 5.15.198 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.3 (exclusive)
linux
Linux · f2219745250f388edacabe6cca73654131c67d0a to before 3fd7df4636d8fd5e3592371967a5941204368936, f2219745250f388edacabe6cca73654131c67d0a to before af0689cafb127a8d1af78cc8b72585c9b2a19ecd, f2219745250f388edacabe6cca73654131c67d0a to before 19166de9737218b77122c41a5730ac87025e089f, f2219745250f388edacabe6cca73654131c67d0a to before 9b015f2918b95bdde2ca9cefa10ef02b138aae1e, f2219745250f388edacabe6cca73654131c67d0a to before 9e7c63c69f57b1db1a8a1542359a6167ff8fcef1, f2219745250f388edacabe6cca73654131c67d0a to before 62cd5d480b9762ce70d720a81fa5b373052ae05f
Linux
Linux · 5.13
Linux
Component: Not specified by the source
File: security/keys/trusted-keys/trusted_tpm2.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-71154
Affected technology
linux kernel · from 3.10.1 (inclusive), before 5.10.248 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.4 (exclusive)
linux
linux kernel · 3.10
linux
linux kernel · 3.10 · update rc3
linux
linux kernel · 3.10 · update rc4
linux
linux kernel · 3.10 · update rc5
linux
linux kernel · 3.10 · update rc6
linux
linux kernel · 3.10 · update rc7
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
Linux · 4d12997a9bb3d217ad4b925ec3074ec89364bf95 to before a4e2442d3c48355a84463342f397134f149936d7, 4d12997a9bb3d217ad4b925ec3074ec89364bf95 to before 2f966186b99550e3c665dbfb87b8314e30acea02, 4d12997a9bb3d217ad4b925ec3074ec89364bf95 to before db2244c580540306d60ce783ed340190720cd429, 4d12997a9bb3d217ad4b925ec3074ec89364bf95 to before 4bd4ea3eb326608ffc296db12c105f92dc2f2190, 4d12997a9bb3d217ad4b925ec3074ec89364bf95 to before 6492ad6439ff1a479fc94dc6052df3628faed8b6, 4d12997a9bb3d217ad4b925ec3074ec89364bf95 to before 151403e903840c9cf06754097b6732c14f26c532, 4d12997a9bb3d217ad4b925ec3074ec89364bf95 to before 12cab1191d9890097171156d06bfa8d31f1e39c8
Linux
Linux · 3.10
Linux
Component: Not specified by the source
File: drivers/net/usb/rtl8150.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-71162
Affected technology
linux kernel · from 4.7 (inclusive), before 5.10.249 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.67 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
Linux · f46b195799b5cb05338e7c44cb3617eacb56d755 to before 5f8d1d66a952d0396671e1f21ff8127a4d14fb4e, f46b195799b5cb05338e7c44cb3617eacb56d755 to before 76992310f80776b4d1f7f8915f59b92883a3e44c, f46b195799b5cb05338e7c44cb3617eacb56d755 to before ae3eed72de682ddbba507ed2d6b848c21a6b721e, f46b195799b5cb05338e7c44cb3617eacb56d755 to before 59cb421b0902fbef2b9512ae8ba198a20f26b41f, f46b195799b5cb05338e7c44cb3617eacb56d755 to before cb2c9c4bb1322cc3c9984ad17db8cdd2663879ca, f46b195799b5cb05338e7c44cb3617eacb56d755 to before be655c3736b3546f39bc8116ffbf2a3b6cac96c4, f46b195799b5cb05338e7c44cb3617eacb56d755 to before 2efd07a7c36949e6fa36a69183df24d368bf9e96
Linux
Linux · 4.7
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: drivers/dma/tegra210-adma.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-71163
Affected technology
linux kernel · from 5.15 (inclusive), before 5.15.199 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.67 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
Linux · 6e7f3ee97bbe2c7d7a53b7dbd7a08a579e03c8c9 to before b7bd948f89271c92d9ca9b2b682bfba56896e959, 6e7f3ee97bbe2c7d7a53b7dbd7a08a579e03c8c9 to before b2d077180a56e3b7c97b7517d0465b584adc693b, 6e7f3ee97bbe2c7d7a53b7dbd7a08a579e03c8c9 to before c81ea0222eaaafdd77348e27d1e84a1b8cfc0c99, 6e7f3ee97bbe2c7d7a53b7dbd7a08a579e03c8c9 to before 0c97ff108f825a70c3bb29d65ddf0a013d231bb9, 6e7f3ee97bbe2c7d7a53b7dbd7a08a579e03c8c9 to before a7226fd61def74b60dd8e47ec84cabafc39d575b, 6e7f3ee97bbe2c7d7a53b7dbd7a08a579e03c8c9 to before 799900f01792cf8b525a44764f065f83fcafd468
Linux
Linux · 5.15
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: drivers/dma/idxd/compat.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-71180
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-71182
Affected technology
linux kernel · from 5.4.1 (inclusive), before 5.10.248 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.161 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.121 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.66 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.6 (exclusive)
linux
linux kernel · 5.4
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
linux kernel · 6.19 · update rc8
linux
Linux · 9d71dd0c70099914fcd063135da3c580865e924c to before ebb0dfd718dd31c8d3600612ca4b7207ec3d923a, 9d71dd0c70099914fcd063135da3c580865e924c to before c3a4316e3c746af415c0fd6c6d489ad13f53714d, 9d71dd0c70099914fcd063135da3c580865e924c to before 46ca9dc978923c5e1247a9e9519240ba7ace413c, 9d71dd0c70099914fcd063135da3c580865e924c to before 78d87b72cebe2a993fd5b017e9f14fb6278f2eae, 9d71dd0c70099914fcd063135da3c580865e924c to before ba6f0d1832eeb5eb3a6dc5cb30e0f720b3cb3536, 9d71dd0c70099914fcd063135da3c580865e924c to before 79dd3f1d9dd310c2af89b09c71f34d93973b200f, 9d71dd0c70099914fcd063135da3c580865e924c to before 5d5602236f5db19e8b337a2cd87a90ace5ea776d
Linux
Linux · 5.4
Linux
Component: Not specified by the source
File: net/can/j1939/transport.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-71185
Affected technology
linux kernel · from 4.4.1 (inclusive), before 5.10.249 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.67 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux
linux kernel · 4.4
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
linux kernel · 6.19 · update rc8
linux
Linux · 42dbdcc6bf965997c088caff2a8be7f9bf44f701 to before 1befa553f1ecc045dc9ff56107ff50162f63f3c0, 42dbdcc6bf965997c088caff2a8be7f9bf44f701 to before c933aa74d9f8d35e6cda322c38c4a907d37a9a2b, 42dbdcc6bf965997c088caff2a8be7f9bf44f701 to before 43725bd47d984937c429919ae291896d982d1f17, 42dbdcc6bf965997c088caff2a8be7f9bf44f701 to before 6fdf168f57e331e148a1177a9b590a845c21b315, 42dbdcc6bf965997c088caff2a8be7f9bf44f701 to before f810132e825588fbad3cba940458c58bb7ec4d84, 42dbdcc6bf965997c088caff2a8be7f9bf44f701 to before 30352277d8e09c972436f883a5efd1f1b763ac14, 42dbdcc6bf965997c088caff2a8be7f9bf44f701 to before 4fc17b1c6d2e04ad13fd6c21cfbac68043ec03f9
Linux
Linux · 4.4
Linux
RUGGEDCOM RST2428P · 0 to before V4.0
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: drivers/dma/ti/dma-crossbar.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-71186
Affected technology
linux kernel · from 4.15.1 (inclusive), before 5.10.249 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.67 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux
linux kernel · 4.15
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
linux kernel · 6.19 · update rc8
linux
Linux · df7e762db5f6c8dbd9e480f1c9ef9851de346657 to before 3b42020e6790a5e19b36c187ed5b488a5716f97f, df7e762db5f6c8dbd9e480f1c9ef9851de346657 to before 6393da54dcb3488c080a183c4182ddec71ba8d7f, df7e762db5f6c8dbd9e480f1c9ef9851de346657 to before 1dda2a32303df0091896b01a9d09070d61fa344c, df7e762db5f6c8dbd9e480f1c9ef9851de346657 to before 1a179ac01ff3993ab97e33cc77c316ed7415cda1, df7e762db5f6c8dbd9e480f1c9ef9851de346657 to before 2fb10259d4efb4367787b5ae9c94192e8a91c648, df7e762db5f6c8dbd9e480f1c9ef9851de346657 to before 3ef52d31cce8ba816739085a61efe07b63c6cf27, df7e762db5f6c8dbd9e480f1c9ef9851de346657 to before dd6e4943889fb354efa3f700e42739da9bddb6ef
Linux
Linux · 4.15
Linux
RUGGEDCOM RST2428P · 0 to before V4.0
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: drivers/dma/stm32/stm32-dmamux.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-71188
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-71190
Affected technology
linux kernel · from 4.13.1 (inclusive), before 5.10.249 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.67 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux
linux kernel · 4.13
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
linux kernel · 6.19 · update rc8
linux
Linux · 743e1c8ffe4ee5dd7596556dcc3f022ccde13d7b to before 4316e4c4fd2c09f68a262365f21847cafa8fe9dd, 743e1c8ffe4ee5dd7596556dcc3f022ccde13d7b to before 4730f12a192d7314119b3d8331611ab151b87bdf, 743e1c8ffe4ee5dd7596556dcc3f022ccde13d7b to before bc98e68adfef3b25c06ff08f0808bb59f787420c, 743e1c8ffe4ee5dd7596556dcc3f022ccde13d7b to before c80ca7bdff158401440741bdcf9175bd8608580b, 743e1c8ffe4ee5dd7596556dcc3f022ccde13d7b to before db6f1d6d31711e73e6a214c73e6a8fb4cda0483d, 743e1c8ffe4ee5dd7596556dcc3f022ccde13d7b to before 2ed1a9de1f2d727ccae5bc9cc7c63ee3519c0c8b, 743e1c8ffe4ee5dd7596556dcc3f022ccde13d7b to before 7c3a46ebf15a9796b763a54272407fdbf945bed8
Linux
Linux · 4.13
Linux
RUGGEDCOM RST2428P · 0 to before V4.0
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: drivers/dma/bcm-sba-raid.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-71191
Affected technology
linux kernel · from 3.10.1 (inclusive), before 5.10.249 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.67 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux
linux kernel · 3.10
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
linux kernel · 6.19 · update rc8
linux
Linux · bbe89c8e3d598129b728d1388c3ad9abe4e8e261 to before 49d964cde422dc66fea514b7ab24aa729df7081d, bbe89c8e3d598129b728d1388c3ad9abe4e8e261 to before 4c67b4f45c8540ee4e62e24ca4608c6a9a81ee0f, bbe89c8e3d598129b728d1388c3ad9abe4e8e261 to before 48b2d7f530b83cb149dbf0e48f95ccadb2d90da9, bbe89c8e3d598129b728d1388c3ad9abe4e8e261 to before 987c71671367f42460689b78244d7b894c50999a, bbe89c8e3d598129b728d1388c3ad9abe4e8e261 to before 6a86cf2c09e149d5718a5b7090545f7566da9334, bbe89c8e3d598129b728d1388c3ad9abe4e8e261 to before f3c23b7e941349505c3d40de2cc0acd93d9ac057, bbe89c8e3d598129b728d1388c3ad9abe4e8e261 to before b9074b2d7a230b6e28caa23165e9d8bc0677d333
Linux
Linux · 3.10
Linux
RUGGEDCOM RST2428P · 0 to before V4.0
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: drivers/dma/at_hdmac.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2025-71194
Affected technology
Linux · 4a9d8bdee368de78ace8b36da4eb2186afea162d to before e563f59395981fcd69d130761290929806e728d6, 4a9d8bdee368de78ace8b36da4eb2186afea162d to before dc84036c173cff6a432d9ab926298850b1d2a659, 4a9d8bdee368de78ace8b36da4eb2186afea162d to before d7b04b40ac8e6d814e35202a0e1568809b818295, 4a9d8bdee368de78ace8b36da4eb2186afea162d to before 99da896614d17e8a84aeb2b2d464ac046cc8633d, 4a9d8bdee368de78ace8b36da4eb2186afea162d to before 8b0bb145d3bc264360f525c9717653be3522e528, 4a9d8bdee368de78ace8b36da4eb2186afea162d to before 9ac63333d600732a56b35ee1fa46836da671eb50, 4a9d8bdee368de78ace8b36da4eb2186afea162d to before 5037b342825df7094a4906d1e2a9674baab50cb2
Linux
Linux · 3.11
Linux
Component: Not specified by the source
File: fs/btrfs/transaction.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-71196
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-71197
Affected technology
Linux · e2c94d6f572079511945e64537eb1218643f2e68 to before 49ff9b4b9deacbefa6654a0a2bcaf910c9de7e95, e2c94d6f572079511945e64537eb1218643f2e68 to before 060b08d72a38b158a7f850d4b83c17c2969e0f6b, e2c94d6f572079511945e64537eb1218643f2e68 to before b3fc3e1f04dcc7c41787bbf08a6e0d2728e022cf, e2c94d6f572079511945e64537eb1218643f2e68 to before 6a5820ecfa5a76c3d3e154802c8c15f391ef442e, e2c94d6f572079511945e64537eb1218643f2e68 to before 6fd6d2a8e41b7f544a4d26cbd60bedf9c67893a0, e2c94d6f572079511945e64537eb1218643f2e68 to before e6b2609af21b5cccc9559339591b8a2cbf884169, e2c94d6f572079511945e64537eb1218643f2e68 to before 761fcf46a1bd797bd32d23f3ea0141ffd437668a
Linux
Linux · 5.8
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: drivers/w1/slaves/w1_therm.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2025-71199
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-22976
Affected technology
linux kernel · from 3.0 (inclusive), before 5.10.248 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.161 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.121 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.66 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.6 (exclusive)
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
Linux · 0545a3037773512d3448557ba048cebb73b3e4af to before 6116a83ec167d3ab1390cded854d237481f41b63, 0545a3037773512d3448557ba048cebb73b3e4af to before 0809c4bc06c9c961222df29f2eccfd449304056f, 0545a3037773512d3448557ba048cebb73b3e4af to before cdb24200b043438a144df501f1ebbd926bb1a2c7, 0545a3037773512d3448557ba048cebb73b3e4af to before 11bf9134613f6c71fc0ff36c5d8d33856f6ae3bb, 0545a3037773512d3448557ba048cebb73b3e4af to before 43497313d0da3e12b5cfcd97aa17bf48ee663f95, 0545a3037773512d3448557ba048cebb73b3e4af to before 51ffd447bc37bf1a5776b85523f51d2bc69977f6, 0545a3037773512d3448557ba048cebb73b3e4af to before c1d73b1480235731e35c81df70b08f4714a7d095
Linux
Linux · 3.0
Linux
RUGGEDCOM RST2428P · 0 to before V4.0
Siemens
Component: Not specified by the source
Function: tc_new_tfilter
File: net/sched/sch_qfq.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-22977
Affected technology
linux kernel · from 4.16 (inclusive), before 5.10.248 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.161 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.121 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.66 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.6 (exclusive)
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
Linux · 6d07d1cd300f4c7e16005f881fea388164999cc8 to before 88dd6be7ebb3153b662c2cebcb06e032a92857f5, 6d07d1cd300f4c7e16005f881fea388164999cc8 to before c655d2167bf014d4c61b4faeca59b60ff9b9f6b1, 6d07d1cd300f4c7e16005f881fea388164999cc8 to before 8c6901aa29626e35045130bac09b75f791acca85, 6d07d1cd300f4c7e16005f881fea388164999cc8 to before 582a5e922a9652fcbb7d0165c95d5b20aa37575d, 6d07d1cd300f4c7e16005f881fea388164999cc8 to before 005671c60fcf1dbdb8bddf12a62568fd5e4ec391, 6d07d1cd300f4c7e16005f881fea388164999cc8 to before e00b169eaac5f7cdbf710c354c8fa76d02009115, 6d07d1cd300f4c7e16005f881fea388164999cc8 to before 2a71a1a8d0ed718b1c7a9ac61f07e5755c47ae20
Linux
Linux · 4.16
Linux
RUGGEDCOM RST2428P · 0 to before V4.0
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: net/core/sock.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-22978
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-22980
Affected technology
linux kernel · from 3.18 (inclusive), before 5.10.248 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.161 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.121 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.66 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.6 (exclusive)
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
Linux · 7f5ef2e900d9462bf9cffaf6bb246ed87a20a6d6 to before ca97360860eb02e3ae4ba42c19b439a0fcecbf06, 7f5ef2e900d9462bf9cffaf6bb246ed87a20a6d6 to before e8bfa2401d4c51eca6e48e9b33c798828ca9df61, 7f5ef2e900d9462bf9cffaf6bb246ed87a20a6d6 to before 34eb22836e0cdba093baac66599d68c4cd245a9d, 7f5ef2e900d9462bf9cffaf6bb246ed87a20a6d6 to before 06600719d0f7a723811c45e4d51f5b742f345309, 7f5ef2e900d9462bf9cffaf6bb246ed87a20a6d6 to before ba4811c8b433bfa681729ca42cc62b6034f223b0, 7f5ef2e900d9462bf9cffaf6bb246ed87a20a6d6 to before 53f07d095e7e680c5e4569a55a019f2c0348cdc6, 7f5ef2e900d9462bf9cffaf6bb246ed87a20a6d6 to before 2857bd59feb63fcf40fe4baf55401baea6b4feb4
Linux
Linux · 3.18
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: fs/nfsd/netns.h, fs/nfsd/nfs4state.c, fs/nfsd/nfsctl.c, fs/nfsd/state.h
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
A local attacker with low privileges could trigger a use-after-free error. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not state a further attacker outcome.
CVE-2026-22982
Affected technology
linux kernel · from 5.12 (inclusive), before 5.15.198 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.161 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.121 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.66 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.6 (exclusive)
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
Linux · 528d3f190c98c8f7d9581f68db4af021696727b2 to before 8767f238b0e6c3d0b295ac6dce9fbe6a99bd1b9d, 528d3f190c98c8f7d9581f68db4af021696727b2 to before b17818307446c5a8d925a39a792261dbfa930041, 528d3f190c98c8f7d9581f68db4af021696727b2 to before 2985712dc76dfa670eb7fd607c09d4d48e5f5c6e, 528d3f190c98c8f7d9581f68db4af021696727b2 to before 03fb1708b7d1e76aecebf767ad059c319845039f, 528d3f190c98c8f7d9581f68db4af021696727b2 to before f490af47bbee02441e356a1e0b86e3b3dd5120ff, 528d3f190c98c8f7d9581f68db4af021696727b2 to before 34f3ff52cb9fa7dbf04f5c734fcc4cb6ed5d1a95
Linux
Linux · 5.12
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
Function: in
File: drivers/net/ethernet/mscc/ocelot.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-22984
Affected technology
linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.161 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.121 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.66 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.6 (exclusive)
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
Linux · cd1a677cad994021b19665ed476aea63f5d54f31 to before 194cfe2af4d2a1de599d39dad636b47c2f6c2c96, cd1a677cad994021b19665ed476aea63f5d54f31 to before 79fe3511db416d2f2edcfd93569807cb02736e5e, cd1a677cad994021b19665ed476aea63f5d54f31 to before ef208ea331ef688729f64089b895ed1b49e842e3, cd1a677cad994021b19665ed476aea63f5d54f31 to before 2802ef3380fa8c4a08cda51ec1f085b1a712e9e2, cd1a677cad994021b19665ed476aea63f5d54f31 to before 2d653bb63d598ae4b096dd678744bdcc34ee89e8, cd1a677cad994021b19665ed476aea63f5d54f31 to before 818156caffbf55cb4d368f9c3cac64e458fb49c9
Linux
Linux · 5.11
Linux
Component: Not specified by the source
File: net/ceph/messenger_v2.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-22990
Affected technology
linux kernel · from 2.6.34.1 (inclusive), before 5.10.248 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.161 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.121 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.66 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.6 (exclusive)
linux
linux kernel · 2.6.34
linux
linux kernel · 2.6.34 · update rc2
linux
linux kernel · 2.6.34 · update rc3
linux
linux kernel · 2.6.34 · update rc4
linux
linux kernel · 2.6.34 · update rc5
linux
linux kernel · 2.6.34 · update rc6
linux
linux kernel · 2.6.34 · update rc7
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
Linux · f24e9980eb860d8600cbe5ef3d2fd9295320d229 to before 9aa0b0c14cefece078286d78b97d4c09685e372d, f24e9980eb860d8600cbe5ef3d2fd9295320d229 to before 4b106fbb1c7b841cd402abd83eb2447164c799ea, f24e9980eb860d8600cbe5ef3d2fd9295320d229 to before 6afd2a4213524bc742b709599a3663aeaf77193c, f24e9980eb860d8600cbe5ef3d2fd9295320d229 to before d3613770e2677683e65d062da5e31f48c409abe9, f24e9980eb860d8600cbe5ef3d2fd9295320d229 to before 6c6cec3db3b418c4fdf815731bc39e46dff75e1b, f24e9980eb860d8600cbe5ef3d2fd9295320d229 to before 6348d70af847b79805374fe628d3809a63fd7df3, f24e9980eb860d8600cbe5ef3d2fd9295320d229 to before e00c3f71b5cf75681dbd74ee3f982a99cb690c2b
Linux
Linux · 2.6.34
Linux
Component: Not specified by the source
File: net/ceph/osdmap.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-22991
Affected technology
linux kernel · from 4.13 (inclusive), before 5.10.248 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.161 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.121 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.66 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.6 (exclusive)
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
Linux · 5cf9c4a9959b6273675310d14a834ef14fbca37c to before 9b3730dabcf3764bfe3ff07caf55e641a0b45234, 5cf9c4a9959b6273675310d14a834ef14fbca37c to before 851241d3f78a5505224dc21c03d8692f530256b4, 5cf9c4a9959b6273675310d14a834ef14fbca37c to before ec1850f663da64842614c86b20fe734be070c2ba, 5cf9c4a9959b6273675310d14a834ef14fbca37c to before 8081faaf089db5280c3be820948469f7c58ef8dd, 5cf9c4a9959b6273675310d14a834ef14fbca37c to before c4c2152a858c0ce4d2bff6ca8c1d5b0ef9f2cbdf, 5cf9c4a9959b6273675310d14a834ef14fbca37c to before f21c3fdb96833aac2f533506899fe38c19cf49d5, 5cf9c4a9959b6273675310d14a834ef14fbca37c to before e3fe30e57649c551757a02e1cad073c47e1e075e
Linux
Linux · 4.13
Linux
Component: Not specified by the source
File: net/ceph/osdmap.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-22992
Affected technology
linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.161 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.121 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.66 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.6 (exclusive)
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
Linux · cd1a677cad994021b19665ed476aea63f5d54f31 to before 77229551f2cf72f3e35636db68e6a825b912cf16, cd1a677cad994021b19665ed476aea63f5d54f31 to before 33908769248b38a5e77cf9292817bb28e641992d, cd1a677cad994021b19665ed476aea63f5d54f31 to before e097cd858196b1914309e7e3d79b4fa79383754d, cd1a677cad994021b19665ed476aea63f5d54f31 to before d2c4a5f6996683f287f3851ef5412797042de7f1, cd1a677cad994021b19665ed476aea63f5d54f31 to before 9e0101e57534ef0e7578dd09608a6106736b82e5, cd1a677cad994021b19665ed476aea63f5d54f31 to before e84b48d31b5008932c0a0902982809fbaa1d3b70
Linux
Linux · 5.11
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: net/ceph/mon_client.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-22997
Affected technology
linux kernel · from 5.4 (inclusive), before 5.10.249 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.67 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
Linux · 9d71dd0c70099914fcd063135da3c580865e924c to before a73e7d7e346dae1c22dc3e95b02ca464b12daf2c, 9d71dd0c70099914fcd063135da3c580865e924c to before adabf01c19561e42899da9de56a6a1da0e6b8a5b, 9d71dd0c70099914fcd063135da3c580865e924c to before b1d67607e97d489c0cfbbf55f48a76b00710b0e4, 9d71dd0c70099914fcd063135da3c580865e924c to before 809a437e27a3bf3c1c6c8c157773635552116f2b, 9d71dd0c70099914fcd063135da3c580865e924c to before cb2a610867bc379988bae0bb4b8bbc59c0decf1a, 9d71dd0c70099914fcd063135da3c580865e924c to before 6121b7564c725b632ffe4764abe85aa239d37703, 9d71dd0c70099914fcd063135da3c580865e924c to before 1809c82aa073a11b7d335ae932d81ce51a588a4a
Linux
Linux · 5.4
Linux
Component: Not specified by the source
File: net/can/j1939/transport.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-22998
Affected technology
linux kernel · from 5.4.268 (inclusive), before 5.5 (exclusive)
linux
linux kernel · from 5.10.209 (inclusive), before 5.10.249 (exclusive)
linux
linux kernel · from 5.15.148 (inclusive), before 5.15.199 (exclusive)
linux
linux kernel · from 6.1.75 (inclusive), before 6.1.162 (exclusive)
linux
linux kernel · from 6.6.14 (inclusive), before 6.6.122 (exclusive)
linux
linux kernel · from 6.7.2 (inclusive), before 6.12.67 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
Linux · f775f2621c2ac5cc3a0b3a64665dad4fb146e510 to before baabe43a0edefac8cd7b981ff87f967f6034dafe, 4cb3cf7177ae3666be7fb27d4ad4d72a295fb02d to before 76abc83a9d25593c2b7613c549413079c14a4686, 2871aa407007f6f531fae181ad252486e022df42 to before 7d75570002929d20e40110d6b03e46202c9d1bc7, 24e05760186dc070d3db190ca61efdbce23afc88 to before fdecd3b6aac10d5a18d0dc500fe57f8648b66cd4, efa56305908ba20de2104f1b8508c6a7401833be to before 3def5243150716be86599c2a1767c29c68838b6d, efa56305908ba20de2104f1b8508c6a7401833be to before 374b095e265fa27465f34780e0eb162ff1bef913, efa56305908ba20de2104f1b8508c6a7401833be to before 32b63acd78f577b332d976aa06b56e70d054cbba, ee5e7632e981673f42a50ade25e71e612e543d9d, 70154e8d015c9b4fb56c1a2ef1fc8b83d45c7f68, 5.10.209 to before 5.10.249, 5.15.148 to before 5.15.199, 6.1.75 to before 6.1.162, 6.6.14 to before 6.6.122, 5.4.268 to before 5.5, 6.7.2 to before 6.8
Linux
Linux · 6.8
Linux
Component: Not specified by the source
Function: dereferences
File: drivers/nvme/target/tcp.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-22999
Affected technology
linux kernel · from 3.8 (inclusive), before 5.10.249 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.67 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
Linux · 462dbc9101acd38e92eda93c0726857517a24bbd to before 2a64fb9b47afffeb5dbab5fd3a518e1436dcc90e, 462dbc9101acd38e92eda93c0726857517a24bbd to before cff6cd703f41d8071995956142729e4bba160363, 462dbc9101acd38e92eda93c0726857517a24bbd to before f06f7635499bc806cbe2bbc8805c7cef8b1edddf, 462dbc9101acd38e92eda93c0726857517a24bbd to before 0a234660dc70ce45d771cbc76b20d925b73ec160, 462dbc9101acd38e92eda93c0726857517a24bbd to before 362e269bb03f7076ba9990e518aeddb898232e50, 462dbc9101acd38e92eda93c0726857517a24bbd to before e9d8f11652fa08c647bf7bba7dd8163241a332cd, 462dbc9101acd38e92eda93c0726857517a24bbd to before 3879cffd9d07aa0377c4b8835c4f64b4fb24ac78
Linux
Linux · 3.8
Linux
Component: Not specified by the source
File: net/sched/sch_qfq.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-23001
Affected technology
linux kernel · from 3.18.1 (inclusive), before 5.10.249 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.67 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux
linux kernel · 3.18
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
linux kernel · 6.19 · update rc8
linux
Linux · 79cf79abce71eb7dbc40e2f3121048ca5405cb47 to before 8133e85b8a3ec9f10d861e0002ec6037256e987e, 79cf79abce71eb7dbc40e2f3121048ca5405cb47 to before 484919832e2db6ce1e8add92c469e5d459a516b5, 79cf79abce71eb7dbc40e2f3121048ca5405cb47 to before 232afc74a6dde0fe1830988e5827921f5ec9bb3f, 79cf79abce71eb7dbc40e2f3121048ca5405cb47 to before 15f6faf36e162532bec5cc05eb3fc622108bf2ed, 79cf79abce71eb7dbc40e2f3121048ca5405cb47 to before 8518712a2ca952d6da2238c6f0a16b4ae5ea3f13, 79cf79abce71eb7dbc40e2f3121048ca5405cb47 to before 6dbead9c7677186f22b7981dd085a0feec1f038e, 79cf79abce71eb7dbc40e2f3121048ca5405cb47 to before 7470a7a63dc162f07c26dbf960e41ee1e248d80e
Linux
Linux · 3.18
Linux
Component: Not specified by the source
File: drivers/net/macvlan.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-23003
Affected technology
linux kernel · from 5.10.210 (inclusive), before 5.10.249 (exclusive)
linux
linux kernel · from 5.15.149 (inclusive), before 5.15.199 (exclusive)
linux
linux kernel · from 6.1.77 (inclusive), before 6.1.162 (exclusive)
linux
linux kernel · from 6.6.16 (inclusive), before 6.6.122 (exclusive)
linux
linux kernel · from 6.7.4 (inclusive), before 6.8 (exclusive)
linux
linux kernel · from 6.8.1 (inclusive), before 6.12.67 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux
linux kernel · 6.8
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
linux kernel · 6.19 · update rc8
linux
Linux · a9bc32879a08f23cdb80a48c738017e39aea1080 to before f9c5c5b791d3850570796f9e067629474e613796, af6b5c50d47ab43e5272ad61935d0ed2e264d3f0 to before 64c71d60a21a9ed0a802483dcd422b5b24eb1abe, d54e4da98bbfa8c257bdca94c49652d81d18a4d8 to before 9e1c8c2a33d0a7b1f637b5d0602fe56ed10166af, 350a6640fac4b53564ec20aa3f4a0922cb0ba5e6 to before 2f03dafea0a8096a2eb60f551218b360e5bab9a3, 8d975c15c0cd744000ca386247432d57b21f9df0 to before df5ffde9669314500809bc498ae73d6d3d9519ac, 8d975c15c0cd744000ca386247432d57b21f9df0 to before b9f915340f25cae1562f18e1eb52deafca328414, 8d975c15c0cd744000ca386247432d57b21f9df0 to before 81c734dae203757fb3c9eee6f9896386940776bd, c835df3bcc14858ae9b27315dd7de76370b94f3a, 5.10.210 to before 5.10.249, 5.15.149 to before 5.15.199, 6.1.77 to before 6.1.162, 6.6.16 to before 6.6.122, 6.7.4 to before 6.8
Linux
Linux · 6.8
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: net/ipv6/ip6_tunnel.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-23011
Affected technology
linux kernel · from 3.10.1 (inclusive), before 5.10.249 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.67 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux
linux kernel · 3.10
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
linux kernel · 6.19 · update rc8
linux
Linux · c54419321455631079c7d6e60bc732dd0c5914c5 to before eeb9a521de40c6fadccc12fa5205e5a1b364d5a8, c54419321455631079c7d6e60bc732dd0c5914c5 to before 8d5b6b2d79c1c22a5b0db1187a6439dff375a022, c54419321455631079c7d6e60bc732dd0c5914c5 to before 2ecf0aa7cc262472a9599cc51ba02ada0897a17a, c54419321455631079c7d6e60bc732dd0c5914c5 to before 06fe0801396a36cab865b34f666de1d65bc5ce8e, c54419321455631079c7d6e60bc732dd0c5914c5 to before aa57bfea4674e6da8104fa3a37760a6f5f255dad, c54419321455631079c7d6e60bc732dd0c5914c5 to before 554201ed0a8f4d32e719f42caeaeb2735a9ed6ca, c54419321455631079c7d6e60bc732dd0c5914c5 to before e67c577d89894811ce4dcd1a9ed29d8b63476667
Linux
Linux · 3.10
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: net/ipv4/ip_gre.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-23019
Affected technology
linux kernel · from 5.10.1 (inclusive), before 5.15.198 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.161 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.121 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.66 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.6 (exclusive)
linux
linux kernel · 5.10
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
linux kernel · 6.19 · update rc8
linux
Linux · 34dd1710f5a3c9a7dc78e1ff6de69a19d407db25 to before 8a4333b2818f0d853b43e139936c20659366e4a0, 34dd1710f5a3c9a7dc78e1ff6de69a19d407db25 to before 325aea74be7e192b5c947c782da23b0d19a5fda2, 34dd1710f5a3c9a7dc78e1ff6de69a19d407db25 to before 94e070cd50790317fba7787ae6006934b7edcb6f, 34dd1710f5a3c9a7dc78e1ff6de69a19d407db25 to before 3950054c9512add0cc79ab7e72b6d2f9f675e25b, 34dd1710f5a3c9a7dc78e1ff6de69a19d407db25 to before 326a4b7e61d01db3507f71c8bb5e85362f607064, 34dd1710f5a3c9a7dc78e1ff6de69a19d407db25 to before a428e0da1248c353557970848994f35fd3f005e2
Linux
Linux · 5.10
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: drivers/net/ethernet/marvell/prestera/prestera_devlink.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-23020
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-23021
Affected technology
linux kernel · from 3.10.1 (inclusive), before 5.10.248 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.161 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.121 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.66 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.6 (exclusive)
linux
linux kernel · 3.10
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
linux kernel · 6.19 · update rc8
linux
Linux · 323b34963d113efb566635f43858f40cce01d5f9 to before 5397ea6d21c35a17707e201a60761bdee00bcc4e, 323b34963d113efb566635f43858f40cce01d5f9 to before a40af9a2904a1ab8ce61866ebe2a894ef30754ba, 323b34963d113efb566635f43858f40cce01d5f9 to before ac5d92d2826dec51e5d4c6854865bc5817277452, 323b34963d113efb566635f43858f40cce01d5f9 to before 93f18eaa190374e0f2d253e3b1a65cee19a7abe6, 323b34963d113efb566635f43858f40cce01d5f9 to before 471dfb97599eec74e0476046b3ef8e7037f27b34, 323b34963d113efb566635f43858f40cce01d5f9 to before ce6eef731aba23a988decea1df3b08cf978f7b01, 323b34963d113efb566635f43858f40cce01d5f9 to before afa27621a28af317523e0836dad430bec551eb54
Linux
Linux · 3.10
Linux
Component: Not specified by the source
File: drivers/net/usb/pegasus.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-23026
Affected technology
linux kernel · from 5.11.1 (inclusive), before 5.15.199 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.67 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux
linux kernel · 5.11
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
linux kernel · 6.19 · update rc8
linux
Linux · 5d0c3533a19f48e5e7e73806a3e4b29cd4364130 to before 4532f18e4ab36def1f55cd936d0fc002b2ce34c2, 5d0c3533a19f48e5e7e73806a3e4b29cd4364130 to before 694ab1f6f16cb69f7c5ef2452b22ba7b00a3c7c7, 5d0c3533a19f48e5e7e73806a3e4b29cd4364130 to before 6bf4ef078fd11910988889a6c0b3698d2e0c89af, 5d0c3533a19f48e5e7e73806a3e4b29cd4364130 to before 01b1d781394fc9b83015e3a3cd46b17bda842bd8, 5d0c3533a19f48e5e7e73806a3e4b29cd4364130 to before 55a67ba5ac4cebfd54cc8305d4d57a0f1dfe6a85, 5d0c3533a19f48e5e7e73806a3e4b29cd4364130 to before 3f747004bbd641131d9396d87b5d2d3d1e182728
Linux
Linux · 5.11
Linux
RUGGEDCOM RST2428P · 0 to before V4.0
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
Function: directly
File: drivers/dma/qcom/gpi.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-23033
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-23037
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-23038
Affected technology
Linux · d67ae825a59d639e4d8b82413af84d854617a87e to before e2dde5dafb80f1af4028ed10ad255f42af71c784, d67ae825a59d639e4d8b82413af84d854617a87e to before 27c90d8ed81e7a289c9fe41b5e31d8bb609a3385, d67ae825a59d639e4d8b82413af84d854617a87e to before 34b9dd179818ff7af2b36410985fd8166573c62d, d67ae825a59d639e4d8b82413af84d854617a87e to before 869862056e100973e76ce9f5f1b01837771b7722, d67ae825a59d639e4d8b82413af84d854617a87e to before 86da7efd12295a7e2b4abde5e5984c821edd938f, d67ae825a59d639e4d8b82413af84d854617a87e to before ed5d3f2f6885eb99f729e6ffd946e3aa058bd3eb, d67ae825a59d639e4d8b82413af84d854617a87e to before 0c728083654f0066f5e10a1d2b0bd0907af19a58
Linux
Linux · 4.0
Linux
RUGGEDCOM RST2428P · 0 to before V4.0
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
Function: jumps
File: fs/nfs/flexfilelayout/flexfilelayoutdev.c
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-23047
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-23049
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-23056
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-23058
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-23060
Affected technology
linux kernel · from 4.3 (inclusive), before 5.10.249 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
Linux · 104880a6b470958ddc30e139c41aa4f6ed3a5234 to before df22c9a65e9a9daa368a72fed596af9d7d5876bb, 104880a6b470958ddc30e139c41aa4f6ed3a5234 to before fee86edf5803f1d1f19e3b4f2dacac241bddfa48, 104880a6b470958ddc30e139c41aa4f6ed3a5234 to before 767e8349f7e929b7dd95c08f0b4cb353459b365e, 104880a6b470958ddc30e139c41aa4f6ed3a5234 to before b0a9609283a5c852addb513dafa655c61eebc1ef, 104880a6b470958ddc30e139c41aa4f6ed3a5234 to before 161bdc90fce25bd9890adc67fa1c8563a7acbf40, 104880a6b470958ddc30e139c41aa4f6ed3a5234 to before 9532ff0d0e90ff78a214299f594ab9bac81defe4, 104880a6b470958ddc30e139c41aa4f6ed3a5234 to before 2397e9264676be7794f8f7f1e9763d90bd3c7335
Linux
Linux · 4.3
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: crypto/authencesn.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-23061
Affected technology
linux kernel · from 3.8 (inclusive), before 5.10.249 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
Linux · 080f40a6fa28dab299da7a652e444b1e2d9231e7 to before d9d824582f2ec76459ffab449e9b05c7bc49645c, 080f40a6fa28dab299da7a652e444b1e2d9231e7 to before 40a3334ffda479c63e416e61ff086485e24401f7, 080f40a6fa28dab299da7a652e444b1e2d9231e7 to before c1b39fa24c140bc616f51fef4175c1743e2bb132, 080f40a6fa28dab299da7a652e444b1e2d9231e7 to before 7c308f7530bffafa994e0aa8dc651a312f4b9ff4, 080f40a6fa28dab299da7a652e444b1e2d9231e7 to before 94a7fc42e21c7d9d1c49778cd1db52de5df52a01, 080f40a6fa28dab299da7a652e444b1e2d9231e7 to before 3b1a593eab941c3f32417896cc7df564191f2482, 080f40a6fa28dab299da7a652e444b1e2d9231e7 to before 248e8e1a125fa875158df521b30f2cc7e27eeeaa
Linux
Linux · 3.8
Linux
Component: Not specified by the source
File: drivers/net/can/usb/kvaser_usb/kvaser_usb_core.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-23063
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-23064
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-23071
Affected technology
linux kernel · from 4.15 (inclusive), before 5.10.249 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
Linux · 8698b9364710e7bac84b3af07dd410e39c8c2e08 to before e1a7072bc4f958c9e852dc7e57e39f12b0bb44b5, 8698b9364710e7bac84b3af07dd410e39c8c2e08 to before 766e243ae8c8b27087a4cc605752c0d5ee2daeab, 8698b9364710e7bac84b3af07dd410e39c8c2e08 to before f1e2fe26a51eca95b41420af76d22c2e613efd5e, 8698b9364710e7bac84b3af07dd410e39c8c2e08 to before 24f31be6ad70537fd7706269d99c92cade465a09, 8698b9364710e7bac84b3af07dd410e39c8c2e08 to before 4aab0ca0a0f7760e33edcb4e47576064d05128f5, 8698b9364710e7bac84b3af07dd410e39c8c2e08 to before c2d2cf710dc3ee1a69e00b4ed8de607a92a07889, 8698b9364710e7bac84b3af07dd410e39c8c2e08 to before 4b58aac989c1e3fafb1c68a733811859df388250
Linux
Linux · 4.15
Linux
Component: Not specified by the source
File: drivers/base/regmap/regmap.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-23073
Affected technology
linux kernel · from 3.15 (inclusive), before 5.10.249 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
Linux · dad0d04fa7ba41ce603a01e8e64967650303e9a2 to before 49ef094fdbc3526e5db2aebb404b84f79c5603dc, dad0d04fa7ba41ce603a01e8e64967650303e9a2 to before 0d7c9e793e351cbbe9e06a9ca47d77b6ad288fb0, dad0d04fa7ba41ce603a01e8e64967650303e9a2 to before 7c54d0c3e2cad4300be721ec2aecfcf8a63bc9f4, dad0d04fa7ba41ce603a01e8e64967650303e9a2 to before 7761d7801f40e61069b4df3db88b36d80d089f8a, dad0d04fa7ba41ce603a01e8e64967650303e9a2 to before 99129d80a5d4989ef8566f434f3589f60f28042b, dad0d04fa7ba41ce603a01e8e64967650303e9a2 to before 31efbcff90884ea5f65bf3d1de01267db51ee3d1, dad0d04fa7ba41ce603a01e8e64967650303e9a2 to before 4f431d88ea8093afc7ba55edf4652978c5a68f33
Linux
Linux · 3.15
Linux
Component: Not specified by the source
File: drivers/net/wireless/rsi/rsi_91x_mac80211.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-23074
Affected technology
linux kernel · from 2.6.12.1 (inclusive), before 5.10.249 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux
linux kernel · 2.6.12
linux
linux kernel · 2.6.12 · update rc2
linux
linux kernel · 2.6.12 · update rc3
linux
linux kernel · 2.6.12 · update rc4
linux
linux kernel · 2.6.12 · update rc5
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 73d970ff0eddd874a84c953387c7f4464b705fc6, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ae810e6a8ac4fe25042e6825d2a401207a2e41fb, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before dad49a67c2d817bfec98e6e45121b351e3a0202c, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 0686bedfed34155520f3f735cbf3210cb9044380, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 4c7e8aa71c9232cba84c289b4b56cba80b280841, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 16ed73c1282d376b956bff23e5139add061767ba, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 50da4b9d07a7a463e2cfb738f3ad4cff6b2c9c3b
Linux
Linux · 2.6.12
Linux
Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 7 Extended Lifecycle Support · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 8 · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 8.2 Advanced Update Support · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 8.6 Telecommunications Update Service · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 8.8 Telecommunications Update Service · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 10 · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 9 · Exact affected versions not specified by the source
Red Hat
Component: Not specified by the source
File: net/sched/sch_teql.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-23075
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-23076
Affected technology
linux kernel · from 2.6.31 (inclusive), before 5.10.249 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
Linux · 8cc72361481f00253f1e468ade5795427386d593 to before 6524205326e0c1a21263b5c14e48e14ef7e449ae, 8cc72361481f00253f1e468ade5795427386d593 to before afca7ff5d5d4d63a1acb95461f55ca9a729feedf, 8cc72361481f00253f1e468ade5795427386d593 to before 8c1d09806e1441bc6a54b9a4f2818918046d5174, 8cc72361481f00253f1e468ade5795427386d593 to before a8c42d11b0526a89192bd2f79facb4c60c8a1f38, 8cc72361481f00253f1e468ade5795427386d593 to before d77ba72558cd66704f0fb7e0969f697e87c0f71c, 8cc72361481f00253f1e468ade5795427386d593 to before 873e2360d247eeee642878fcc3398babff7e387c, 8cc72361481f00253f1e468ade5795427386d593 to before 61006c540cbdedea83b05577dc7fb7fa18fe1276
Linux
Linux · 2.6.31
Linux
Component: Not specified by the source
File: sound/pci/ctxfi/ctamixer.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-23078
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-23080
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-23083
Affected technology
linux kernel · from 3.18 (inclusive), before 5.10.249 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
Linux · 23461551c00628c3f3fe9cf837bf53cf8f212b63 to before c7498f9bc390479ccfad7c7f2332237ff4945b03, 23461551c00628c3f3fe9cf837bf53cf8f212b63 to before 611ef4bd9c73d9e6d87bed57a635ff1fdd8c91ea, 23461551c00628c3f3fe9cf837bf53cf8f212b63 to before 6e983789b7588ee59cbf303583546c043bad8e19, 23461551c00628c3f3fe9cf837bf53cf8f212b63 to before 1cc98b8887cabb1808d2f4a37cd10a7be7574771, 23461551c00628c3f3fe9cf837bf53cf8f212b63 to before b7db31a52c3862a1a32202a273a4c32e7f5f4823, 23461551c00628c3f3fe9cf837bf53cf8f212b63 to before 9b75dff8446ec871030d8daf5a69e74f5fe8b956, 23461551c00628c3f3fe9cf837bf53cf8f212b63 to before 7a9bc9e3f42391e4c187e099263cf7a1c4b69ff5
Linux
Linux · 3.18
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: Documentation/netlink/specs/fou.yaml, net/ipv4/fou_nl.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-23084
Affected technology
linux kernel · from 3.12 (inclusive), before 5.10.249 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
Linux · 95046b927a54f461766f83a212c6a93bc5fd2e67 to before 4cba480c9b9a3861a515262225cb53a1f5978344, 95046b927a54f461766f83a212c6a93bc5fd2e67 to before 92c6dc181a18e6e0ddb872ed35cb48a9274829e4, 95046b927a54f461766f83a212c6a93bc5fd2e67 to before 6c3e00888dbec887125a08b51a705b9b163fcdd1, 95046b927a54f461766f83a212c6a93bc5fd2e67 to before e206fb415db36bad52bb90c08d46ce71ffbe8a80, 95046b927a54f461766f83a212c6a93bc5fd2e67 to before 47ffb4dcffe336f4a7bd0f3284be7aadc6484698, 95046b927a54f461766f83a212c6a93bc5fd2e67 to before 31410a01a86bcb98c798d01061abf1f789c4f75a, 95046b927a54f461766f83a212c6a93bc5fd2e67 to before 8215794403d264739cc676668087512950b2ff31
Linux
Linux · 3.12
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
Function: will
File: drivers/net/ethernet/emulex/benet/be_cmds.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-23085
Affected technology
linux kernel · from 3.19 (inclusive), before 5.10.249 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
Linux · cc2d3216f53c9fff0030eb71cacc4ce5f39d1d7e to before e332b3b69e5b3acf07204a4b185071bab15c2b88, cc2d3216f53c9fff0030eb71cacc4ce5f39d1d7e to before e2f9c751f73a2d5bb62d94ab030aec118a811f27, cc2d3216f53c9fff0030eb71cacc4ce5f39d1d7e to before 85215d633983233809f7d4dad163b953331b8238, cc2d3216f53c9fff0030eb71cacc4ce5f39d1d7e to before 1b323391560354d8c515de8658b057a1daa82adb, cc2d3216f53c9fff0030eb71cacc4ce5f39d1d7e to before 084ba3b99f2dfd991ce7e84fb17117319ec3cd9f, cc2d3216f53c9fff0030eb71cacc4ce5f39d1d7e to before 03faa61eb4b9ca9aa09bd91d4c3773d8e7b1ac98, cc2d3216f53c9fff0030eb71cacc4ce5f39d1d7e to before 8d76a7d89c12d08382b66e2f21f20d0627d14859
Linux
Linux · 3.19
Linux
Component: Not specified by the source
File: drivers/irqchip/irq-gic-v3-its.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-23087
Affected technology
linux kernel · from 3.18 (inclusive), before 5.10.249 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
Linux · d9d660f6e562a47b4065eeb7e538910b0471b988 to before a8bb3ec8d85951a56af0a72d93ccbc2aee42eef9, d9d660f6e562a47b4065eeb7e538910b0471b988 to before 427b0fb30ddec3bad05dcd73b00718f98c7026d2, d9d660f6e562a47b4065eeb7e538910b0471b988 to before 4a975c72429b050c234405668b742cdecc11548e, d9d660f6e562a47b4065eeb7e538910b0471b988 to before f86264ec0e2b102fcd49bf3e4f32fee669d482fc, d9d660f6e562a47b4065eeb7e538910b0471b988 to before 32e52b56056daf0f0881fd9254706acf25b4be97, d9d660f6e562a47b4065eeb7e538910b0471b988 to before 24c441f0e24da175d7912095663f526ac480dc4f, d9d660f6e562a47b4065eeb7e538910b0471b988 to before 901a5f309daba412e2a30364d7ec1492fa11c32c
Linux
Linux · 3.18
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: drivers/xen/xen-scsiback.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-23089
Affected technology
linux kernel · from 2.6.13 (inclusive), before 5.10.249 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
Linux · 6639b6c2367f884ca172b78d69f7da17bfab2e5e to before 51b1aa6fe7dc87356ba58df06afb9677c9b841ea, 6639b6c2367f884ca172b78d69f7da17bfab2e5e to before 56fb6efd5d04caf6f14994d51ec85393b9a896c6, 6639b6c2367f884ca172b78d69f7da17bfab2e5e to before 7009daeefa945973a530b2f605fe445fc03747af, 6639b6c2367f884ca172b78d69f7da17bfab2e5e to before 7bff0156d13f0ad9436e5178b979b063d59f572a, 6639b6c2367f884ca172b78d69f7da17bfab2e5e to before e6f103a22b08daf5df2f4aa158081840e5910963, 6639b6c2367f884ca172b78d69f7da17bfab2e5e to before dc1a5dd80af1ee1f29d8375b12dd7625f6294dad, 6639b6c2367f884ca172b78d69f7da17bfab2e5e to before 930e69757b74c3ae083b0c3c7419bfe7f0edc7b2
Linux
Linux · 2.6.13
Linux
Component: Not specified by the source
File: sound/usb/mixer.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-23090
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-23091
Affected technology
linux kernel · from 4.4 (inclusive), before 5.10.249 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
Linux · 39f4034693b7c7bd1fe4cb58c93259d600f55561 to before af4b9467296b9a16ebc008147238070236982b6d, 39f4034693b7c7bd1fe4cb58c93259d600f55561 to before 64015cbf06e8bb75b81ae95b997e847b55280f7f, 39f4034693b7c7bd1fe4cb58c93259d600f55561 to before b71e64ef7ff9443835d1333e3e80ab1e49e5209f, 39f4034693b7c7bd1fe4cb58c93259d600f55561 to before bf7785434b5d05d940d936b78925080950bd54dd, 39f4034693b7c7bd1fe4cb58c93259d600f55561 to before 0fca16c5591534cc1fec8b6181277ee3a3d0f26c, 39f4034693b7c7bd1fe4cb58c93259d600f55561 to before f9b059bda4276f2bb72cb98ec7875a747f042ea2, 39f4034693b7c7bd1fe4cb58c93259d600f55561 to before 95fc36a234da24bbc5f476f8104a5a15f99ed3e3
Linux
Linux · 4.4
Linux
Component: Not specified by the source
File: drivers/hwtracing/intel_th/core.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-23093
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-23095
Affected technology
linux kernel · from 3.18 (inclusive), before 5.10.249 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
Linux · 37dd0247797b168ad1cc7f5dbec825a1ee66535b to before 886f186328b718400dbf79e1bc8cbcbd710ab766, 37dd0247797b168ad1cc7f5dbec825a1ee66535b to before 380a82d36e37db49fd41ecc378c22fd29392e96a, 37dd0247797b168ad1cc7f5dbec825a1ee66535b to before 536f5bbc322eb1e175bdd1ced22b236a951c4d8f, 37dd0247797b168ad1cc7f5dbec825a1ee66535b to before f87b9b7a618c82e7465e872eb10e14c803871892, 37dd0247797b168ad1cc7f5dbec825a1ee66535b to before ce569b389a5c78d64788a5ea94560e17fa574b35, 37dd0247797b168ad1cc7f5dbec825a1ee66535b to before 5437a279804ced8088cabb945dba88a26d828f8c, 37dd0247797b168ad1cc7f5dbec825a1ee66535b to before 9a56796ad258786d3624eef5aefba394fc9bdded
Linux
Linux · 3.18
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: net/ipv4/fou_core.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-23096
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-23097
Affected technology
linux kernel · from 5.9.9 (inclusive), before 5.10 (exclusive)
linux
linux kernel · from 5.10.1 (inclusive), before 5.10.249 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux
linux kernel · 5.10
linux
linux kernel · 5.10 · update rc4
linux
linux kernel · 5.10 · update rc5
linux
linux kernel · 5.10 · update rc6
linux
linux kernel · 5.10 · update rc7
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
Linux · 336bf30eb76580b579dc711ded5d599d905c0217 to before e7396d23f9d5739f56cf9ab430c3a169f5508394, 336bf30eb76580b579dc711ded5d599d905c0217 to before ad97b9a55246eb940a26ac977f80892a395cabf9, 336bf30eb76580b579dc711ded5d599d905c0217 to before 5edb9854f8df5428b40990a1c7d60507da5bd330, 336bf30eb76580b579dc711ded5d599d905c0217 to before 526394af4e8ade89cacd1a9ce2b97712712fcc34, 336bf30eb76580b579dc711ded5d599d905c0217 to before b75070823b89009f5123fd0e05a8e0c3d39937c1, 336bf30eb76580b579dc711ded5d599d905c0217 to before 1b68efce6dd483d22f50d0d3800c4cfda14b1305, 336bf30eb76580b579dc711ded5d599d905c0217 to before b7880cb166ab62c2409046b2347261abf701530e, ef792d6ce0db6a56e56743b1de1716a982c3b851, 5.9.9 to before 5.10
Linux
Linux · 5.10
Linux
Component: Not specified by the source
File: mm/migrate.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-23098
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-23099
Affected technology
linux kernel · from 2.6.24 (inclusive), before 5.15.199 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
Linux · 872254dd6b1f80cb95ee9e2e22980888533fc293 to before 19266182b82e9100c799d8a29f5e0452f0bf7703, 872254dd6b1f80cb95ee9e2e22980888533fc293 to before 72925dbb0c8c7b16bf922e93c6cc03cbd8c955c4, 872254dd6b1f80cb95ee9e2e22980888533fc293 to before 5063b2cd9b27d35ab788d707d7858ded0acc8f1d, 872254dd6b1f80cb95ee9e2e22980888533fc293 to before 80c881e53a4fa0a80fa4bef7bc0ead0e8e88940d, 872254dd6b1f80cb95ee9e2e22980888533fc293 to before ef68afb1bee8d35a18896c27d7358079353d8d8a, 872254dd6b1f80cb95ee9e2e22980888533fc293 to before 43dee6f7ef1d228821de1b61c292af3744c8d7da, 872254dd6b1f80cb95ee9e2e22980888533fc293 to before c84fcb79e5dbde0b8d5aeeaf04282d2149aebcf6
Linux
Linux · 2.6.24
Linux
Component: Not specified by the source
File: drivers/net/bonding/bond_main.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-23101
Affected technology
linux kernel · from 3.7 (inclusive), before 5.10.249 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
Linux · d23a22a74fded23a12434c9463fe66cec2b0afcd to before f7a6df659af777058833802c29b3b7974db5e78a, d23a22a74fded23a12434c9463fe66cec2b0afcd to before d117fdcb21b05c0e0460261d017b92303cd9ba77, d23a22a74fded23a12434c9463fe66cec2b0afcd to before e90c861411fc84629a240384b0a72830539d3386, d23a22a74fded23a12434c9463fe66cec2b0afcd to before 2757f7748ce2d0fa44112024907bafb37e104d6e, d23a22a74fded23a12434c9463fe66cec2b0afcd to before da565bf98c9ad0eabcb09fc97859e0b52f98b7c3, d23a22a74fded23a12434c9463fe66cec2b0afcd to before 78822628165f3d817382f67f91129161159ca234, d23a22a74fded23a12434c9463fe66cec2b0afcd to before d1883cefd31752f0504b94c3bcfa1f6d511d6e87
Linux
Linux · 3.7
Linux
Component: Not specified by the source
File: drivers/leds/led-class.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-23103
Affected technology
linux kernel · from 4.17 (inclusive), before 5.10.249 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
Linux · 8230819494b3bf284ca7262ac5f877333147b937 to before 3c149b662cbb202a450e81f938e702ba333864ad, 8230819494b3bf284ca7262ac5f877333147b937 to before 70feb16e3fbfb10b15de1396557c38e99f1ab8df, 8230819494b3bf284ca7262ac5f877333147b937 to before 88f83e6c9cdb46b8c8ddd0ba01393362963cf589, 8230819494b3bf284ca7262ac5f877333147b937 to before 04ba6de6eff61238e5397c14ac26a6578c7735a5, 8230819494b3bf284ca7262ac5f877333147b937 to before 1f300c10d92c547c3a7d978e1212ff52f18256ed, 8230819494b3bf284ca7262ac5f877333147b937 to before 6a81e2db096913d7e43aada1c350c1282e76db39, 8230819494b3bf284ca7262ac5f877333147b937 to before d3ba32162488283c0a4c5bedd8817aec91748802
Linux
Linux · 4.17
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: drivers/net/ipvlan/ipvlan.h, drivers/net/ipvlan/ipvlan_core.c, drivers/net/ipvlan/ipvlan_main.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-23105
Affected technology
linux kernel · from 3.8 (inclusive), before 5.10.249 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
Linux · 462dbc9101acd38e92eda93c0726857517a24bbd to before fac2c67bb2bb732eae4283e45fc338af7e08c254, 462dbc9101acd38e92eda93c0726857517a24bbd to before b8c24cf5268fb3bfb8d16324c3dbb985f698c835, 462dbc9101acd38e92eda93c0726857517a24bbd to before f27047abf7cac1b6f90c3ad60de21ef9f717c26d, 462dbc9101acd38e92eda93c0726857517a24bbd to before 93b8635974fb050c43d07e35e5edfe6e685ca28a, 462dbc9101acd38e92eda93c0726857517a24bbd to before abd9fc26ea577561a5ef6241a1b058755ffdad0c, 462dbc9101acd38e92eda93c0726857517a24bbd to before 77f1afd0bb4d5da95236f6114e6d0dfcde187ff6, 462dbc9101acd38e92eda93c0726857517a24bbd to before d837fbee92453fbb829f950c8e7cf76207d73f33
Linux
Linux · 3.8
Linux
Component: Not specified by the source
File: net/sched/sch_qfq.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-23108
Affected technology
linux kernel · from 3.9 (inclusive), before 5.10.249 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
Linux · 0024d8ad1639e32d717445c69ca813fd19c2a91c to before feb8243eaea7efd5279b19667d7189fd8654c87a, 0024d8ad1639e32d717445c69ca813fd19c2a91c to before ef6e608e5ee71eca0cd3475c737e684cef24f240, 0024d8ad1639e32d717445c69ca813fd19c2a91c to before 60719661b4cbd7ffbed1a0e0fa3bbc82d8bd2be9, 0024d8ad1639e32d717445c69ca813fd19c2a91c to before 59ff56992bba28051ad67cd8cc7b0edfe7280796, 0024d8ad1639e32d717445c69ca813fd19c2a91c to before ea4a98e924164586066b39f29bfcc7cc9da108cd, 0024d8ad1639e32d717445c69ca813fd19c2a91c to before 07e9373739c6388af9d99797cdb2e79dbbcbe92b, 0024d8ad1639e32d717445c69ca813fd19c2a91c to before f7a980b3b8f80fe367f679da376cf76e800f9480
Linux
Linux · 3.9
Linux
Component: Not specified by the source
File: drivers/net/can/usb/usb_8dev.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-23111
Affected technology
linux kernel · from 4.19.316 (inclusive), before 4.20 (exclusive)
linux
linux kernel · from 5.4.262 (inclusive), before 5.5 (exclusive)
linux
linux kernel · from 5.10.188 (inclusive), before 5.11 (exclusive)
linux
linux kernel · from 5.15.121 (inclusive), before 5.15.200 (exclusive)
linux
linux kernel · from 6.1.36 (inclusive), before 6.1.163 (exclusive)
linux
linux kernel · from 6.3.10 (inclusive), before 6.4 (exclusive)
linux
linux kernel · from 6.4.1 (inclusive), before 6.6.124 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.70 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.10 (exclusive)
linux
linux kernel · 6.4
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
linux kernel · 6.19 · update rc8
linux
Linux · 25aa2ad37c2162be1c0bc4fe6397f7e4c13f00f8 to before 8c760ba4e36c750379d13569f23f5a6e185333f5, d60be2da67d172aecf866302c91ea11533eca4d9 to before b9b6573421de51829f7ec1cce76d85f5f6fbbd7f, 628bd3e49cba1c066228e23d71a852c23e26da73 to before 42c574c1504aa089a0a142e4c13859327570473d, 628bd3e49cba1c066228e23d71a852c23e26da73 to before 1444ff890b4653add12f734ffeffc173d42862dd, 628bd3e49cba1c066228e23d71a852c23e26da73 to before 8b68a45f9722f2babe9e7bad00aa74638addf081, 628bd3e49cba1c066228e23d71a852c23e26da73 to before f41c5d151078c5348271ffaf8e7410d96f2d82f8, bc9f791d2593f17e39f87c6e2b3a36549a3705b1, 3c7ec098e3b588434a8b07ea9b5b36f04cef1f50, a136b7942ad2a50de708f76ea299ccb45ac7a7f9, dc7cdf8cbcbf8b13de1df93f356ec04cdeef5c41, 5.15.121 to before 5.15.200, 6.1.36 to before 6.1.163, 4.19.316 to before 4.20, 5.4.262 to before 5.5, 5.10.188 to before 5.11, 6.3.10 to before 6.4
Linux
Linux · 6.4
Linux
Red Hat Enterprise Linux 10 · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 10.0 Extended Update Support · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 9 · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 9.4 Extended Update Support · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 9.6 Extended Update Support · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 6 · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 7 · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 8 · Exact affected versions not specified by the source
Red Hat
RUGGEDCOM RST2428P · 0 to before V4.0
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: net/netfilter/nf_tables_api.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
The source reports that an attacker could gain higher privileges under the conditions described by the source. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high.
CVE-2026-23119
Affected technology
linux kernel · from 5.5 (inclusive), before 5.10.249 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
Linux · 58deb77cc52da9360d20676e68dd215742cbe473 to before 8e53780732ee881394406f79da5263b81eb48f7e, 58deb77cc52da9360d20676e68dd215742cbe473 to before 3be945abdd228fd00f6afcf8d137002867a4651b, 58deb77cc52da9360d20676e68dd215742cbe473 to before f4faaa1297ecf3255a8591fff2633df05bd5ec84, 58deb77cc52da9360d20676e68dd215742cbe473 to before 0efee0b992f28bd5ee01c7a86ef6a307c42eb907, 58deb77cc52da9360d20676e68dd215742cbe473 to before bc3c8d2493c6f4d2038844dc8b7ee93de050f7fa, 58deb77cc52da9360d20676e68dd215742cbe473 to before de97735a40a144974bf3896ee4cc0270db2e47db, 58deb77cc52da9360d20676e68dd215742cbe473 to before 5f9b329096596b7e53e07d041d7fca4cbe1be752
Linux
Linux · 5.5
Linux
Component: Not specified by the source
File: drivers/net/bonding/bond_main.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-23120
Affected technology
linux kernel · from 3.16.57 (inclusive), before 3.17 (exclusive)
linux
linux kernel · from 4.15.8 (inclusive), before 4.16 (exclusive)
linux
linux kernel · from 4.16.1 (inclusive), before 5.10.249 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux
linux kernel · 4.16
linux
linux kernel · 4.16 · update rc5
linux
linux kernel · 4.16 · update rc6
linux
linux kernel · 4.16 · update rc7
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
Linux · d00fa9adc528c1b0e64d532556764852df8bd7b9 to before 1f63ca44b4f419a1663d94d1bb0b4e2beb73fdb4, d00fa9adc528c1b0e64d532556764852df8bd7b9 to before 36c40a80109f1771d59558050b1a71e13c60c759, d00fa9adc528c1b0e64d532556764852df8bd7b9 to before eae074dab764ea181bbed5e88626889319177498, d00fa9adc528c1b0e64d532556764852df8bd7b9 to before 68e92085427c84e7679ddb53c0d68836d220b6e7, d00fa9adc528c1b0e64d532556764852df8bd7b9 to before 3d6d414b214ce31659bded2f8df50c93a3769474, d00fa9adc528c1b0e64d532556764852df8bd7b9 to before 32d417497b79efb403d75f4c185fe6fd9d64b94f, d00fa9adc528c1b0e64d532556764852df8bd7b9 to before 7a29f6bf60f2590fe5e9c4decb451e19afad2bcf, 15df699fdc5af46a9fb15ae2d9326294852de5b5, 18bdaefc715b4530b4b2fe670506bb47713664cc, 3.16.57 to before 3.17, 4.15.8 to before 4.16
Linux
Linux · 4.16
Linux
Component: Not specified by the source
File: net/l2tp/l2tp_core.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-23121
Affected technology
linux kernel · from 2.6.27 (inclusive), before 5.10.249 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
Linux · 1b2b03f8e514e4f68e293846ba511a948b80243c to before d5d99cb9e0839093cd53aa3b28176fce2f820ca0, 1b2b03f8e514e4f68e293846ba511a948b80243c to before 13f3b3b87068898056db4c79ee67052fbde11d43, 1b2b03f8e514e4f68e293846ba511a948b80243c to before accc3f8266d2a49881dbcf78c459477f4efa0ff3, 1b2b03f8e514e4f68e293846ba511a948b80243c to before fc8ba17fd3337bd8b1913c30b95df0fee00d8fb7, 1b2b03f8e514e4f68e293846ba511a948b80243c to before aa6e33cd74ca4965f2bbcb025e0b672fb0168a69, 1b2b03f8e514e4f68e293846ba511a948b80243c to before 7ac345a93af31358e18e9606eb7b354691bf6757, 1b2b03f8e514e4f68e293846ba511a948b80243c to before 8175dbf174d487afab81e936a862a8d9b8a1ccb6
Linux
Linux · 2.6.27
Linux
Component: Not specified by the source
File: drivers/isdn/mISDN/timerdev.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-23124
Affected technology
linux kernel · from 5.15 (inclusive), before 5.15.199 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
Linux · 49b99da2c9ce13ffcd93fe3a0f5670791c1d76f7 to before 4630897eb1a039b5d7b737b8dc9521d9d4b568b5, 49b99da2c9ce13ffcd93fe3a0f5670791c1d76f7 to before 2619499169fb1c2ac4974b0f2d87767fb543582b, 49b99da2c9ce13ffcd93fe3a0f5670791c1d76f7 to before fad8f4ff7928f4d52a062ffdcffa484989c79c47, 49b99da2c9ce13ffcd93fe3a0f5670791c1d76f7 to before 2a2b9d25f801afecf2f83cacce98afa8fd73e3c9, 49b99da2c9ce13ffcd93fe3a0f5670791c1d76f7 to before e3c1040252e598f7b4e33a42dc7c38519bc22428, 49b99da2c9ce13ffcd93fe3a0f5670791c1d76f7 to before 9a063f96d87efc3a6cc667f8de096a3d38d74bb5
Linux
Linux · 5.15
Linux
Component: Not specified by the source
File: net/ipv6/ndisc.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-23125
Affected technology
linux kernel · from 2.6.24 (inclusive), before 5.10.249 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
Linux · 730fc3d05cd4ba4c9ce2de91f3d43349e95dbbf5 to before 5a309bedf02ee08b0653215f06c94d61ec7a214a, 730fc3d05cd4ba4c9ce2de91f3d43349e95dbbf5 to before 784428ab1889eb185a1459e9d6bc52df33d572ef, 730fc3d05cd4ba4c9ce2de91f3d43349e95dbbf5 to before e94294798548e8cfbd80869e1d2f97efce92582c, 730fc3d05cd4ba4c9ce2de91f3d43349e95dbbf5 to before e7e81abbcc5620c9532080538f9709a6ea382855, 730fc3d05cd4ba4c9ce2de91f3d43349e95dbbf5 to before bf2b543b3cc4ebb4ab5bca4f8dfa5612035d45b8, 730fc3d05cd4ba4c9ce2de91f3d43349e95dbbf5 to before 0c4adb1f391a7b92a0405e9d7c05624c0d9f8a65, 730fc3d05cd4ba4c9ce2de91f3d43349e95dbbf5 to before a80c9d945aef55b23b54838334345f20251dad83
Linux
Linux · 2.6.24
Linux
Component: Not specified by the source
File: net/sctp/sm_statefuns.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-23128
Affected technology
linux kernel · from 6.1 (inclusive), before 6.1.162 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
Linux · 89245600941e4e0f87d77f60ee269b5e61ef4e49 to before 122b7cb80f7d468fcc2d18cf7eb320f09f310a96, 89245600941e4e0f87d77f60ee269b5e61ef4e49 to before 8557bdd9af8dd04911fba56ff92b17842b0b5c7f, 89245600941e4e0f87d77f60ee269b5e61ef4e49 to before 9773a886f26766a8db92d4b342b620a82c2de7dd, 89245600941e4e0f87d77f60ee269b5e61ef4e49 to before 6e32070d29d1a35d8f4b3c03babf6c0e5efd1d08, 89245600941e4e0f87d77f60ee269b5e61ef4e49 to before e2f8216ca2d8e61a23cb6ec355616339667e0ba6
Linux
Linux · 6.1
Linux
Component: Not specified by the source
File: arch/arm64/kernel/hibernate.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-23133
Affected technology
linux kernel · from 4.16 (inclusive), before 5.10.249 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
Linux · 2a1e1ad3fd37a632b61f50e73dafddb4b0fa57f1 to before e2dda298ef809aa201ea7c0904c4d064f6c497cb, 2a1e1ad3fd37a632b61f50e73dafddb4b0fa57f1 to before fc8da65f9fe1bc6802f8240b342cfff4f5c7e841, 2a1e1ad3fd37a632b61f50e73dafddb4b0fa57f1 to before b0ad924332a96550a84b8c0ae5483e7042d65fa9, 2a1e1ad3fd37a632b61f50e73dafddb4b0fa57f1 to before 1928851334ecfd6e0d663121ab69ac639d4217a6, 2a1e1ad3fd37a632b61f50e73dafddb4b0fa57f1 to before 5d6fa4d2c9799c09389588da5118a72d97d87e92, 2a1e1ad3fd37a632b61f50e73dafddb4b0fa57f1 to before 07f363f305793baecad41816f73056252f3df61e, 2a1e1ad3fd37a632b61f50e73dafddb4b0fa57f1 to before 9282a1e171ad8d2205067e8ec3bbe4e3cef4f29f
Linux
Linux · 4.16
Linux
Component: Not specified by the source
File: drivers/net/wireless/ath/ath10k/ce.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-23146
Affected technology
linux kernel · from 5.4.293 (inclusive), before 5.5 (exclusive)
linux
linux kernel · from 5.10.237 (inclusive), before 5.10.249 (exclusive)
linux
linux kernel · from 5.15.181 (inclusive), before 5.15.199 (exclusive)
linux
linux kernel · from 6.1.135 (inclusive), before 6.1.162 (exclusive)
linux
linux kernel · from 6.6.88 (inclusive), before 6.6.123 (exclusive)
linux
linux kernel · from 6.12.24 (inclusive), before 6.12.69 (exclusive)
linux
linux kernel · from 6.13.12 (inclusive), before 6.14 (exclusive)
linux
linux kernel · from 6.14.3 (inclusive), before 6.18.9 (exclusive)
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
Linux · a40f94f7caa8d3421b64f63ac31bc0f24c890f39 to before b0a900939e7e4866d9b90e9112514b72c451e873, 9e5a0f5777162e503400c70c6ed25fbbe2d38799 to before ccc683f597ceb28deb966427ae948e5ac739a909, 80f14e9de6a43a0bd8194cad1003a3e6dcbc3984 to before 937a573423ce5a96fdb1fd425dc6b8d8d4ab5779, 02e1bcdfdf769974e7e9fa285e295cd9852e2a38 to before 186d147cf7689ba1f9b3ddb753ab634a84940cc9, 281782d2c6730241e300d630bb9f200d831ede71 to before 53e54cb31e667fca05b1808b990eac0807d1dab0, 5df5dafc171b90d0b8d51547a82657cd5a1986c7 to before 03e8c90c62233382042b7bd0fa8b8900552fdb62, 5df5dafc171b90d0b8d51547a82657cd5a1986c7 to before 0c3cd7a0b862c37acbee6d9502107146cc944398, 1dcf08fcff5ca529de6dc0395091f28854f4e54a, 8e5aff600539e5faea294d9612cca50220e602b8, db7509fa110dd9b11134b75894677f30353b2c51, 5.10.237 to before 5.10.249, 5.15.181 to before 5.15.199, 6.1.135 to before 6.1.162, 6.6.88 to before 6.6.123, 6.12.24 to before 6.12.69, 5.4.293 to before 5.5, 6.13.12 to before 6.14, 6.14.3 to before 6.15
Linux
Linux · 6.15
Linux
Component: Not specified by the source
File: drivers/bluetooth/hci_ldisc.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-23150
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-23164
Affected technology
linux kernel · from 4.6 (inclusive), before 5.10.249 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.123 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.69 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.9 (exclusive)
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
Linux · e420114eef4a3a5025a243b89b0dc343101e3d3c to before 2a3a64d75d2d0727da285749476761ebcad557a3, e420114eef4a3a5025a243b89b0dc343101e3d3c to before b11e6f926480ab0939fec44781f28558c54be4e7, e420114eef4a3a5025a243b89b0dc343101e3d3c to before 8ce2e85889939c02740b4245301aa5c35fc94887, e420114eef4a3a5025a243b89b0dc343101e3d3c to before d448bf96889f1905e740c554780f5c9fa0440566, e420114eef4a3a5025a243b89b0dc343101e3d3c to before d8723917efda3b4f4c3de78d1ec1e1af015c0be1, e420114eef4a3a5025a243b89b0dc343101e3d3c to before dce375f4afc348c310d171abcde7ec1499a4c26a, e420114eef4a3a5025a243b89b0dc343101e3d3c to before 8d7ba71e46216b8657a82ca2ec118bc93812a4d0
Linux
Linux · 4.6
Linux
Component: Not specified by the source
File: drivers/net/ethernet/rocker/rocker_main.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-23167
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-23170
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-23209
Affected technology
linux kernel · from 4.9.1 (inclusive), before 5.10.250 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.200 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.163 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.124 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.70 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.10 (exclusive)
linux
linux kernel · 4.9
linux
linux kernel · 4.9 · update rc6
linux
linux kernel · 4.9 · update rc7
linux
linux kernel · 4.9 · update rc8
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
linux kernel · 6.19 · update rc8
linux
Linux · aa5fd0fb77486b8a6764ead8627baa14790e4280 to before da5c6b8ae47e414be47e5e04def15b25d5c962dc, aa5fd0fb77486b8a6764ead8627baa14790e4280 to before 5dae6b36a7cb7a4fcf4121b95e9ca7f96f816c8a, aa5fd0fb77486b8a6764ead8627baa14790e4280 to before c43d0e787cbba569ec9d11579ed370b50fab6c9c, aa5fd0fb77486b8a6764ead8627baa14790e4280 to before 11ba9f0dc865136174cb98834280fb21bbc950c7, aa5fd0fb77486b8a6764ead8627baa14790e4280 to before 986967a162142710076782d5b93daab93a892980, aa5fd0fb77486b8a6764ead8627baa14790e4280 to before cdedcd5aa3f3cb8b7ae0f87ab3a936d0bd583d66, aa5fd0fb77486b8a6764ead8627baa14790e4280 to before f8db6475a83649689c087a8f52486fcc53e627e9
Linux
Linux · 4.9
Linux
Component: Not specified by the source
File: drivers/net/macvlan.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-23268
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-23269
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-23403
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-23404
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-23405
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-23406
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-23407
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-23408
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-23409
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-23410
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
CVE-2026-23411
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
- CVE
- CVE-2023-53520, CVE-2023-53662, CVE-2023-54207, CVE-2024-36903, CVE-2024-36927, CVE-2024-37354, CVE-2024-41014, CVE-2024-46830, CVE-2024-47666, CVE-2024-49968, CVE-2024-53114, CVE-2024-56538, CVE-2024-58011, CVE-2025-21780, CVE-2025-21861, CVE-2025-22022, CVE-2025-22058, CVE-2025-22111, CVE-2025-22121, CVE-2025-23143, CVE-2025-37849, CVE-2025-38022, CVE-2025-38057, CVE-2025-38125, CVE-2025-38129, CVE-2025-38232, CVE-2025-38236, CVE-2025-38248, CVE-2025-38408, CVE-2025-38556, CVE-2025-38584, CVE-2025-38591, CVE-2025-39869, CVE-2025-39873, CVE-2025-39876, CVE-2025-39880, CVE-2025-39883, CVE-2025-39885, CVE-2025-39907, CVE-2025-39911, CVE-2025-39913, CVE-2025-39923, CVE-2025-39934, CVE-2025-39937, CVE-2025-39943, CVE-2025-39945, CVE-2025-39949, CVE-2025-39951, CVE-2025-39953, CVE-2025-39955, CVE-2025-39967, CVE-2025-39968, CVE-2025-39969, CVE-2025-39970, CVE-2025-39971, CVE-2025-39972, CVE-2025-39973, CVE-2025-39980, CVE-2025-39985, CVE-2025-39986, CVE-2025-39987, CVE-2025-39988, CVE-2025-39994, CVE-2025-39995, CVE-2025-39996, CVE-2025-39998, CVE-2025-40001, CVE-2025-40006, CVE-2025-40011, CVE-2025-40020, CVE-2025-40021, CVE-2025-40026, CVE-2025-40027, CVE-2025-40029, CVE-2025-40030, CVE-2025-40035, CVE-2025-40040, CVE-2025-40042, CVE-2025-40043, CVE-2025-40044, CVE-2025-40048, CVE-2025-40049, CVE-2025-40053, CVE-2025-40055, CVE-2025-40060, CVE-2025-40068, CVE-2025-40070, CVE-2025-40078, CVE-2025-40081, CVE-2025-40083, CVE-2025-40085, CVE-2025-40087, CVE-2025-40088, CVE-2025-40092, CVE-2025-40094, CVE-2025-40105, CVE-2025-40106, CVE-2025-40109, CVE-2025-40110, CVE-2025-40111, CVE-2025-40112, CVE-2025-40115, CVE-2025-40116, CVE-2025-40118, CVE-2025-40120, CVE-2025-40121, CVE-2025-40124, CVE-2025-40125, CVE-2025-40126, CVE-2025-40127, CVE-2025-40134, CVE-2025-40140, CVE-2025-40149, CVE-2025-40153, CVE-2025-40154, CVE-2025-40164, CVE-2025-40167, CVE-2025-40171, CVE-2025-40173, CVE-2025-40178, CVE-2025-40179, CVE-2025-40183, CVE-2025-40187, CVE-2025-40188, CVE-2025-40194, CVE-2025-40200, CVE-2025-40204, CVE-2025-40205, CVE-2025-40211, CVE-2025-40215, CVE-2025-40219, CVE-2025-40220, CVE-2025-40223, CVE-2025-40231, CVE-2025-40233, CVE-2025-40240, CVE-2025-40243, CVE-2025-40244, CVE-2025-40245, CVE-2025-40248, CVE-2025-40252, CVE-2025-40253, CVE-2025-40254, CVE-2025-40257, CVE-2025-40258, CVE-2025-40259, CVE-2025-40261, CVE-2025-40262, CVE-2025-40263, CVE-2025-40264, CVE-2025-40269, CVE-2025-40271, CVE-2025-40272, CVE-2025-40273, CVE-2025-40275, CVE-2025-40277, CVE-2025-40278, CVE-2025-40279, CVE-2025-40280, CVE-2025-40281, CVE-2025-40282, CVE-2025-40283, CVE-2025-40304, CVE-2025-40306, CVE-2025-40308, CVE-2025-40309, CVE-2025-40312, CVE-2025-40313, CVE-2025-40314, CVE-2025-40315, CVE-2025-40317, CVE-2025-40319, CVE-2025-40321, CVE-2025-40322, CVE-2025-40324, CVE-2025-40331, CVE-2025-40342, CVE-2025-40343, CVE-2025-40345, CVE-2025-40346, CVE-2025-40349, CVE-2025-40351, CVE-2025-40360, CVE-2025-40363, CVE-2025-68168, CVE-2025-68176, CVE-2025-68177, CVE-2025-68185, CVE-2025-68191, CVE-2025-68192, CVE-2025-68194, CVE-2025-68200, CVE-2025-68204, CVE-2025-68211, CVE-2025-68217, CVE-2025-68220, CVE-2025-68227, CVE-2025-68229, CVE-2025-68238, CVE-2025-68241, CVE-2025-68244, CVE-2025-68245, CVE-2025-68249, CVE-2025-68254, CVE-2025-68255, CVE-2025-68257, CVE-2025-68258, CVE-2025-68261, CVE-2025-68264, CVE-2025-68266, CVE-2025-68282, CVE-2025-68284, CVE-2025-68285, CVE-2025-68286, CVE-2025-68287, CVE-2025-68288, CVE-2025-68289, CVE-2025-68290, CVE-2025-68295, CVE-2025-68301, CVE-2025-68302, CVE-2025-68303, CVE-2025-68308, CVE-2025-68312, CVE-2025-68321, CVE-2025-68325, CVE-2025-68327, CVE-2025-68328, CVE-2025-68330, CVE-2025-68331, CVE-2025-68332, CVE-2025-68335, CVE-2025-68336, CVE-2025-68337, CVE-2025-68339, CVE-2025-68340, CVE-2025-68344, CVE-2025-68346, CVE-2025-68349, CVE-2025-68354, CVE-2025-68362, CVE-2025-68364, CVE-2025-68365, CVE-2025-68366, CVE-2025-68367, CVE-2025-68372, CVE-2025-68724, CVE-2025-68725, CVE-2025-68727, CVE-2025-68728, CVE-2025-68732, CVE-2025-68733, CVE-2025-68734, CVE-2025-68740, CVE-2025-68746, CVE-2025-68757, CVE-2025-68758, CVE-2025-68759, CVE-2025-68764, CVE-2025-68765, CVE-2025-68767, CVE-2025-68769, CVE-2025-68771, CVE-2025-68774, CVE-2025-68776, CVE-2025-68777, CVE-2025-68780, CVE-2025-68782, CVE-2025-68783, CVE-2025-68785, CVE-2025-68787, CVE-2025-68788, CVE-2025-68795, CVE-2025-68796, CVE-2025-68797, CVE-2025-68799, CVE-2025-68800, CVE-2025-68801, CVE-2025-68803, CVE-2025-68804, CVE-2025-68808, CVE-2025-68813, CVE-2025-68814, CVE-2025-68815, CVE-2025-68816, CVE-2025-68817, CVE-2025-68818, CVE-2025-68819, CVE-2025-68820, CVE-2025-71064, CVE-2025-71066, CVE-2025-71068, CVE-2025-71069, CVE-2025-71075, CVE-2025-71077, CVE-2025-71078, CVE-2025-71079, CVE-2025-71081, CVE-2025-71082, CVE-2025-71083, CVE-2025-71084, CVE-2025-71085, CVE-2025-71086, CVE-2025-71087, CVE-2025-71091, CVE-2025-71093, CVE-2025-71094, CVE-2025-71096, CVE-2025-71097, CVE-2025-71098, CVE-2025-71102, CVE-2025-71104, CVE-2025-71105, CVE-2025-71108, CVE-2025-71111, CVE-2025-71112, CVE-2025-71113, CVE-2025-71114, CVE-2025-71116, CVE-2025-71118, CVE-2025-71120, CVE-2025-71121, CVE-2025-71125, CVE-2025-71127, CVE-2025-71131, CVE-2025-71132, CVE-2025-71133, CVE-2025-71136, CVE-2025-71137, CVE-2025-71147, CVE-2025-71154, CVE-2025-71162, CVE-2025-71163, CVE-2025-71180, CVE-2025-71182, CVE-2025-71185, CVE-2025-71186, CVE-2025-71188, CVE-2025-71190, CVE-2025-71191, CVE-2025-71194, CVE-2025-71196, CVE-2025-71197, CVE-2025-71199, CVE-2026-22976, CVE-2026-22977, CVE-2026-22978, CVE-2026-22980, CVE-2026-22982, CVE-2026-22984, CVE-2026-22990, CVE-2026-22991, CVE-2026-22992, CVE-2026-22997, CVE-2026-22998, CVE-2026-22999, CVE-2026-23001, CVE-2026-23003, CVE-2026-23011, CVE-2026-23019, CVE-2026-23020, CVE-2026-23021, CVE-2026-23026, CVE-2026-23033, CVE-2026-23037, CVE-2026-23038, CVE-2026-23047, CVE-2026-23049, CVE-2026-23056, CVE-2026-23058, CVE-2026-23060, CVE-2026-23061, CVE-2026-23063, CVE-2026-23064, CVE-2026-23071, CVE-2026-23073, CVE-2026-23074, CVE-2026-23075, CVE-2026-23076, CVE-2026-23078, CVE-2026-23080, CVE-2026-23083, CVE-2026-23084, CVE-2026-23085, CVE-2026-23087, CVE-2026-23089, CVE-2026-23090, CVE-2026-23091, CVE-2026-23093, CVE-2026-23095, CVE-2026-23096, CVE-2026-23097, CVE-2026-23098, CVE-2026-23099, CVE-2026-23101, CVE-2026-23103, CVE-2026-23105, CVE-2026-23108, CVE-2026-23111, CVE-2026-23119, CVE-2026-23120, CVE-2026-23121, CVE-2026-23124, CVE-2026-23125, CVE-2026-23128, CVE-2026-23133, CVE-2026-23146, CVE-2026-23150, CVE-2026-23164, CVE-2026-23167, CVE-2026-23170, CVE-2026-23209, CVE-2026-23268, CVE-2026-23269, CVE-2026-23403, CVE-2026-23404, CVE-2026-23405, CVE-2026-23406, CVE-2026-23407, CVE-2026-23408, CVE-2026-23409, CVE-2026-23410, CVE-2026-23411
- CWE
- CWE-20, CWE-119, CWE-120, CWE-122, CWE-125, CWE-129, CWE-134, CWE-190, CWE-193, CWE-200, CWE-362, CWE-367, CWE-400, CWE-401, CWE-416, CWE-457, CWE-476, CWE-617, CWE-667, CWE-672, CWE-704, CWE-754, CWE-772, CWE-787, CWE-825, CWE-862, CWE-863, CWE-908
- Product
- linux-azure-5.15
- CCR priority
- 0.1 /100 (P5)
- CVSS 3.1
- CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H · OSV.dev
- EPSS
- 0.00294 · percentile 0.20859 · 2026-10-21
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- OSV.dev · Source record · observed 2026-10-21 16:37:07.765749+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2022-49465.html