CVE-2024-36347, CVE-2024-50004, CVE-2024-57795 +390 more CVEs: linux kernel 4.7, 6.14, 6.6 (+46 more affected versions); +40 more affected products

CVE-2024-36347

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50004

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-57795

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-58096

Affected technology

linux kernel · from 5.6 (inclusive), before 6.14.2 (exclusive)
linux

Linux · d5c65159f2895379e11ca13f62feabe93278985d to before 27ca8004ba93a0665faa6d477eaeb551e03de6c8, d5c65159f2895379e11ca13f62feabe93278985d to before 1d2178918efc928e11bed9631469ef79ff0a862a, d5c65159f2895379e11ca13f62feabe93278985d to before b85758e76b6452740fc2a08ced6759af64c0d59a, d5c65159f2895379e11ca13f62feabe93278985d to before 63b7af49496d0e32f7a748b6af3361ec138b1bd3
Linux

Linux · 5.6
Linux

Component: Not specified by the source
File: drivers/net/wireless/ath/ath11k/dp_rx.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-58097

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-22022

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-22111

Affected technology

linux kernel · from 5.15 (inclusive), before 6.14.2 (exclusive)
linux

Linux · 893b195875340cb44b54c9db99e708145f1210e8 to before f51e471cb1577d510c3096e126678e1ea20d2efd, 893b195875340cb44b54c9db99e708145f1210e8 to before 338a0f3c66aef4ee13052880d02200aae8f2d8a8, 893b195875340cb44b54c9db99e708145f1210e8 to before d767ce15045df510f55cdd2af5df0eee71f928d0, 893b195875340cb44b54c9db99e708145f1210e8 to before 4888e1dcc341e9a132ef7b8516234b3c3296de56, 893b195875340cb44b54c9db99e708145f1210e8 to before 00fe0ac64efd1f5373b3dd9f1f84b19235371e39, 893b195875340cb44b54c9db99e708145f1210e8 to before ed3ba9b6e280e14cc3148c1b226ba453f02fa76c
Linux

Linux · 5.15
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: include/linux/if_bridge.h, net/bridge/br_ioctl.c, net/bridge/br_private.h, net/core/dev_ioctl.c, net/socket.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-37926

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38022

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-38201

Affected technology

linux kernel · from 5.6 (inclusive), before 6.12.35 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.4 (exclusive)
linux

Linux · 3c4287f62044a90e73a561aa05fc46e62da173da to before 1fe27f97944017a9d3c5af4d6d95282bff0f1147, 3c4287f62044a90e73a561aa05fc46e62da173da to before 4abccfb61f422300be014b8e734c63344306f009, 3c4287f62044a90e73a561aa05fc46e62da173da to before 80417057ac60dd80f4816eb426e4e4a5bf696534, 3c4287f62044a90e73a561aa05fc46e62da173da to before df524a68d9021c1401965d610bb6e42ee5d9611e, 3c4287f62044a90e73a561aa05fc46e62da173da to before 0ab3de047808f375a36cd345225572eb3366f3c6, 3c4287f62044a90e73a561aa05fc46e62da173da to before d2768016f091f8a5264076b433fd7c3fabb6eb97, 3c4287f62044a90e73a561aa05fc46e62da173da to before b85e3367a5716ed3662a4fe266525190d2af76df
Linux

Linux · 5.6
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/netfilter/nft_set_pipapo.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38234

Affected technology

linux kernel · before 6.15.4 (exclusive)
linux

Linux · e8fa136262e1121288bb93befe2295928ffd240d to before 9f6022b2573ae068793810db719e131df3ded405, e8fa136262e1121288bb93befe2295928ffd240d to before debfbc047196df1f6bfd52f2d028c21dce67f0de, e8fa136262e1121288bb93befe2295928ffd240d to before 07ecabfbca64f4f0b6071cf96e49d162fa9d138d, e8fa136262e1121288bb93befe2295928ffd240d to before 690e47d1403e90b7f2366f03b52ed3304194c793
Linux

Linux · 2.6.25
Linux

Component: Not specified by the source
File: kernel/sched/rt.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-38591

Affected technology

linux kernel · from 4.13 (inclusive), before 6.16.1 (exclusive)
linux

Linux · f96da09473b52c09125cc9bf7d7d4576ae8229e0 to before 7847c4140e06f6e87229faae22cc38525334c156, f96da09473b52c09125cc9bf7d7d4576ae8229e0 to before feae34c992eb7191862fb1594c704fbbf650fef8, f96da09473b52c09125cc9bf7d7d4576ae8229e0 to before 33660d44e789edb4f303210c813fc56d56377a90, f96da09473b52c09125cc9bf7d7d4576ae8229e0 to before e2e9599f3503df7cf3569d2b6c50d5488fb59435, f96da09473b52c09125cc9bf7d7d4576ae8229e0 to before 058a0da4f6d916a79b693384111bb80a90d73763, f96da09473b52c09125cc9bf7d7d4576ae8229e0 to before 202900ceeef67458c964c2af6e1427c8e533ea7c, f96da09473b52c09125cc9bf7d7d4576ae8229e0 to before e09299225d5ba3916c91ef70565f7d2187e4cca0
Linux

Linux · 4.13
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: kernel/bpf/cgroup.c, net/core/filter.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-40039

Affected technology

linux kernel · from 5.15.145 (inclusive), before 5.16 (exclusive)
linux

linux kernel · from 6.1.71 (inclusive), before 6.2 (exclusive)
linux

linux kernel · from 6.3 (inclusive), before 6.6.123 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.53 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.17.3 (exclusive)
linux

Linux · a4348710a7267705b75692dc1a000920481d1d92 to before 69674b029002b1d90b655f014bdf64f404efa54d, b685757c7b08d5073046fb379be965fd6c06aafc to before 6b615a8fb3af0baf8126cde3d4fee97d57222ffc, b685757c7b08d5073046fb379be965fd6c06aafc to before 5cc679ba0f4505936124cd4179ba66bb0a4bd9f3, b685757c7b08d5073046fb379be965fd6c06aafc to before 6bd7e0e55dcea2cf0d391bbc21c2eb069b4be3e1, b685757c7b08d5073046fb379be965fd6c06aafc to before 305853cce379407090a73b38c5de5ba748893aee, 1f485b54d04a920723984062c912174330a05178, 052b41ef2abe274f068e892aee81406f11bd1f3a, 5.15.145 to before 5.16
Linux

Linux · 6.3
Linux

Component: Not specified by the source
File: fs/smb/server/mgmt/user_session.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-40082

Affected technology

linux kernel · from 5.4.297 (inclusive), before 5.5 (exclusive)
linux

linux kernel · from 5.10.241 (inclusive), before 5.11 (exclusive)
linux

linux kernel · from 5.15.190 (inclusive), before 5.15.200 (exclusive)
linux

linux kernel · from 6.1.149 (inclusive), before 6.1.163 (exclusive)
linux

linux kernel · from 6.6.103 (inclusive), before 6.6.124 (exclusive)
linux

linux kernel · from 6.12.43 (inclusive), before 6.12.70 (exclusive)
linux

linux kernel · from 6.15.11 (inclusive), before 6.16 (exclusive)
linux

linux kernel · from 6.16.2 (inclusive), before 6.17.3 (exclusive)
linux

Linux · ccf0ad56a779e6704c0b27f555dec847f50c7557 to before 343fe375a8dd6ee51a193a1c233b999f5ea4d479, 13604b1d7e7b125fb428cddbec6b8d92baad25d5 to before 782acde47e127c98a113726e2ff8024bd65c0454, 291bb5d931c6f3cd7227b913302a17be21cf53b0 to before c3db89ea1ed3d540eebe8f3c36e806fb75ee4a1e, f7534cbfac0a9ffa4fa17cacc6e8b6446dae24ee to before 5b5228964619b180f366940505b77255b1a03929, 94458781aee6045bd3d0ad4b80b02886b9e2219b to before 857aefc70d4ae3b9bf1ae67434d27d0f79f80c9e, 94458781aee6045bd3d0ad4b80b02886b9e2219b to before bea3e1d4467bcf292c8e54f080353d556d355e26, 73f7da507d787b489761a0fa280716f84fa32b2f, 76a4c6636a69d69409aa253b049b1be717a539c5, 6f93694bcbc2c2ab3e01cd8fba2f296faf34e6b9, 1ca69007e52a73bd8b84b988b61b319816ca8b01, 5.15.190 to before 5.15.200, 6.1.149 to before 6.1.163, 6.6.103 to before 6.6.124, 6.12.43 to before 6.12.70, 5.4.297 to before 5.5, 5.10.241 to before 5.11, 6.15.11 to before 6.16, 6.16.2 to before 6.17
Linux

Linux · 6.17
Linux

Component: Not specified by the source
File: fs/hfsplus/dir.c, fs/hfsplus/hfsplus_fs.h, fs/hfsplus/unicode.c, fs/hfsplus/xattr.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-40149

Affected technology

linux kernel · from 4.18 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.161 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.121 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.66 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.17.3 (exclusive)
linux

Linux · e8f69799810c32dd40c6724d829eccc70baad07f to before 2b1bef126bbb8d0da51491357559126d567c1dee, e8f69799810c32dd40c6724d829eccc70baad07f to before e37ca0092ddace60833790b4ad7a390408fb1be9, e8f69799810c32dd40c6724d829eccc70baad07f to before 13159c7125636371543a82cb7bbae00ab36730cc, e8f69799810c32dd40c6724d829eccc70baad07f to before f09cd209359a23f88d4f3fa3d2379d057027e53c, e8f69799810c32dd40c6724d829eccc70baad07f to before feb474ddbf26b51f462ae2e60a12013bdcfc5407, e8f69799810c32dd40c6724d829eccc70baad07f to before c65f27b9c3be2269918e1cbad6d8884741f835c5
Linux

Linux · 4.18
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/tls/tls_device.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-40164

Affected technology

linux kernel · from 4.7.1 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.17.5 (exclusive)
linux

linux kernel · 4.7
linux

linux kernel · 4.7 · update rc7
linux

linux kernel · 6.18 · update rc1
linux

Linux · 43daa96b166c3cf5ff30dfac0c5efa2620e4beab to before 6635e52bc4165793aefd686962d912d73d323afe, 43daa96b166c3cf5ff30dfac0c5efa2620e4beab to before 65d04291adf7c59338f87aab9c6fe0bfa9993e64, 43daa96b166c3cf5ff30dfac0c5efa2620e4beab to before f45fffae5e2549bd0a4670cc52a15ad54c9f121e, 43daa96b166c3cf5ff30dfac0c5efa2620e4beab to before 17fbad93879e87a334062882b45fa727ba1b3dd7, 43daa96b166c3cf5ff30dfac0c5efa2620e4beab to before d1944bab8e0c1511f0cbf364aa06547735bb0ddb, 43daa96b166c3cf5ff30dfac0c5efa2620e4beab to before 0134c7bff14bd50314a4f92b182850ddfc38e255, 43daa96b166c3cf5ff30dfac0c5efa2620e4beab to before 327cd4b68b4398b6c24f10eb2b2533ffbfc10185
Linux

Linux · 4.7
Linux

Component: Not specified by the source
File: drivers/net/usb/usbnet.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-40325

Affected technology

linux kernel · from 5.15.111 (inclusive), before 5.16 (exclusive)
linux

linux kernel · from 5.17 (inclusive), before 6.14.2 (exclusive)
linux

Linux · c9aa889b035fca4598ae985a0f0c76ebbb547ad2 to before 29c742ff222dd39335b927a6909c23b8752a053c, c9aa889b035fca4598ae985a0f0c76ebbb547ad2 to before 31ff67982c5fa39c0093b9d9f429fef91c2494b7, c9aa889b035fca4598ae985a0f0c76ebbb547ad2 to before 31d3156efe909b53ba174861a3da880c688f5edc, c9aa889b035fca4598ae985a0f0c76ebbb547ad2 to before 3db4404435397a345431b45f57876a3df133f3b4, 39db562b3fedb93978a7e42dd216b306740959f8, 5.15.111 to before 5.16
Linux

Linux · 5.17
Linux

Component: Not specified by the source
File: drivers/md/raid10.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68206

Affected technology

Linux · 1a64edf54f55d7956cf5a0d95898bc1f84f9b818 to before 83273af0b60c093ba0085c205864d8542e1b1653, 1a64edf54f55d7956cf5a0d95898bc1f84f9b818 to before b19492c25eff04852e0cb58f9bb8238b6695ed2d, 1a64edf54f55d7956cf5a0d95898bc1f84f9b818 to before 4de80f0dc3868408dd7fe9817e507123c9dd8bb0, 1a64edf54f55d7956cf5a0d95898bc1f84f9b818 to before b477ef7fa612fa45b6b3134d90d1eeb09396500a, 1a64edf54f55d7956cf5a0d95898bc1f84f9b818 to before 4ab2cd906e4e1a19ddbda6eb532851b0e9cda110, 1a64edf54f55d7956cf5a0d95898bc1f84f9b818 to before 2b52d89cbbb0dbe3e948d8d9a91e704316dccfe6, 1a64edf54f55d7956cf5a0d95898bc1f84f9b818 to before 90918e3b6404c2a37837b8f11692471b4c512de2
Linux

Linux · 4.12
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/netfilter/nft_ct.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68254

Affected technology

Linux · 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before c03cb111628924827351e19baa5b073e9b0d723d, 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before bb5940193d813449540d8d3a82abc045be41f48a, 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before c173ce97d3f0f0c0fefa39139d6d04ba60b5db22, 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before d1ab7f9cee22e7b8a528da9ac953e4193b96cda5, 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before 38292407c2bb5b2b3131aaace4ecc7a829b40b76, 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before bf323db1d883c209880bd92f3b12503e3531c3fc, 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before 502ddcc405b69fa92e0add6c1714d654504f6fd7
Linux

Linux · 4.12
Linux

Component: Not specified by the source
File: drivers/staging/rtl8723bs/core/rtw_mlme_ext.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality impact as low; integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68255

Affected technology

Linux · 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before 49b7806851f93fd342838c93f4f765e0cc5029b0, 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before 4445adedae770037078803d1ce41f9e88a1944b6, 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before d129dc2a5d59b4d9cd2cc0b6eeb04df8461199f0, 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before 34620eb602aa432f090b2b784ee5c5070fb16cf9, 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before 61871c83259a511980ec2664964cecc69005398b, 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before 25411f5fcf5743131158f337c99c2bbf3f8477f5, 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before e841d8ea722315b781c4fc5bf4f7670fbca88875, 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before 6ef0e1c10455927867cac8f0ed6b49f328f8cf95
Linux

Linux · 4.12
Linux

Component: Not specified by the source
File: drivers/staging/rtl8723bs/core/rtw_mlme_ext.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68256

Affected technology

Linux · 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before 9829c6e1b2e4180fd18315252ad6faeab6128076, 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before b977eb31802817f4a37da95bf16bfdaa1eeb5fc2, 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before 30c558447e90935f0de61be181bbcedf75952e00, 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before a54e2b2db1b7de2e008b4f62eec35aaefcc663c5, 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before df191dd9f4c7249d98ada55634fa8ac19089b8cb, 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before c0d93d69e1472ba75b78898979b90a98ba2a2501, 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before 154828bf9559b9c8421fc2f0d7f7f76b3683aaed
Linux

Linux · 4.12
Linux

Component: Not specified by the source
File: drivers/staging/rtl8723bs/core/rtw_ieee80211.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68257

Affected technology

Linux · 3fbfd2223a271426509830e6340c386a1054cfad to before 4836ba483a22ebd076c8faaf8293a7295fad4142, 3fbfd2223a271426509830e6340c386a1054cfad to before 7141915bf0c41cb57d83cdbaf695b8c731b16b71, 3fbfd2223a271426509830e6340c386a1054cfad to before f13895c03620933a58907e3250016f087e39b78c, 3fbfd2223a271426509830e6340c386a1054cfad to before b975f91de5f8f63cf490f0393775cc795f8b0557, 3fbfd2223a271426509830e6340c386a1054cfad to before f6e629dfe6f590091c662a87c9fcf118b1c1c7dc, 3fbfd2223a271426509830e6340c386a1054cfad to before 573b07d2e3d473ee7eb625ef87519922cf01168d, 3fbfd2223a271426509830e6340c386a1054cfad to before aac80e912de306815297a3b74f0426873ffa7dc3, 3fbfd2223a271426509830e6340c386a1054cfad to before 0de7d9cd07a2671fa6089173bccc0b2afe6b93ee
Linux

Linux · 5.8
Linux

Component: Not specified by the source
File: drivers/comedi/comedi_fops.c

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68258

Affected technology

Linux · 77e01cdbad5175f56027fd6fae00bd0fc175651a to before f9ff87aac7b37d462246c46d28912d382a8e2ea6, 77e01cdbad5175f56027fd6fae00bd0fc175651a to before 4cde9a7e025cc09b88097c70606f6b30c22880f4, 77e01cdbad5175f56027fd6fae00bd0fc175651a to before ad7ed3c9c7b8408e8612697bc43a5441fe386c71, 77e01cdbad5175f56027fd6fae00bd0fc175651a to before 049f14557450351750f929ebfff36d849511e132, 77e01cdbad5175f56027fd6fae00bd0fc175651a to before 8952bc1973cd54158c35e06bfb8c29ace7375a48, 77e01cdbad5175f56027fd6fae00bd0fc175651a to before 8dc2f02d3bada9247f00bfd2e5f61f68c389a0a3, 77e01cdbad5175f56027fd6fae00bd0fc175651a to before 543f4c380c2e1f35e60528df7cb54705cda7fee3, 77e01cdbad5175f56027fd6fae00bd0fc175651a to before f24c6e3a39fa355dabfb684c9ca82db579534e72
Linux

Linux · 2.6.30
Linux

Component: Not specified by the source
File: drivers/comedi/drivers/multiq3.c

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68259

Affected technology

Linux · 6ef88d6e36c2b4b3886ec9967cafabe4424d27d5 to before 2e84a018c2895c05abe213eb10db128aa45f6ec6, 6ef88d6e36c2b4b3886ec9967cafabe4424d27d5 to before 152289a51107ef45bbfe9b4aeeaa584a503042b5, 6ef88d6e36c2b4b3886ec9967cafabe4424d27d5 to before 87cc1622c88a4888959d64fa1fc9ba1e264aa3d4, 6ef88d6e36c2b4b3886ec9967cafabe4424d27d5 to before 54bcccc2c7805a00af1d7d2faffd6f424c0133aa, 6ef88d6e36c2b4b3886ec9967cafabe4424d27d5 to before 53903ac9ca1abffa27327e85075ec496fa55ccf3, 6ef88d6e36c2b4b3886ec9967cafabe4424d27d5 to before 4da3768e1820cf15cced390242d8789aed34f54d
Linux

Linux · 6.0
Linux

Component: Not specified by the source
File: arch/x86/include/asm/kvm_host.h, arch/x86/kvm/svm/svm.c, arch/x86/kvm/x86.c

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · No privileges required · No user interaction required

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68261

Affected technology

Linux · c755e251357a0cee0679081f08c3f4ba797a8009 to before b322bac9f01d03190b5abc52be5d9dd9f22a2b41, c755e251357a0cee0679081f08c3f4ba797a8009 to before 61e03dc3794ebf77a706b85e5a36c9c6d70be6de, c755e251357a0cee0679081f08c3f4ba797a8009 to before 5b266cf6851ce72b11b067fe02adf5a8687104ad, c755e251357a0cee0679081f08c3f4ba797a8009 to before 144c48da33a01d92995aeccd8208eb47d2a8e659, c755e251357a0cee0679081f08c3f4ba797a8009 to before 22a76b0861ae61a299c8e126c1aca8c4fda820fd, c755e251357a0cee0679081f08c3f4ba797a8009 to before ba8aeff294ac7ff6dfe293663d815c54c5ee218c, c755e251357a0cee0679081f08c3f4ba797a8009 to before 5cad18e527ba8a9ca5463cc170073eeb5a4826f4, c755e251357a0cee0679081f08c3f4ba797a8009 to before 0cd8feea8777f8d9b9a862b89c688b049a5c8475, 3e96c3fdcfccb321a9e1623f78cc71b44593e965, 5781ac24bbd998ebb1ff30143bb06244d847af48, 9b06cce3ca4d60d442c39bfa7c058b71b1cee6c2, da1e40237f8f3516581b534c484c236a79ccfd14, 7cf6b709b6412afd1d93b2c4b37163c3602e3b95, 3.16.44 to before 3.17, 3.18.107 to before 3.19, 4.4.129 to before 4.5, 4.9.14 to before 4.10, 4.10.2 to before 4.11
Linux

Linux · 4.11
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
Function: ext4_destroy_inline_data_nolock
File: fs/ext4/inline.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68263

Affected technology

Linux · 0626e6641f6b467447c81dd7678a69c66f7746cf to before de85fb58f9967ba024bb08e0041613d37b57b4d1, 0626e6641f6b467447c81dd7678a69c66f7746cf to before 708a620b471a14466f1f52c90bf3f65ebdb31460, 0626e6641f6b467447c81dd7678a69c66f7746cf to before 5ac763713a1ef8f9a8bda1dbd81f0318d67baa4e, 0626e6641f6b467447c81dd7678a69c66f7746cf to before 759c8c30cfa8706c518e56f67971b1f0932f4b9b, 0626e6641f6b467447c81dd7678a69c66f7746cf to before 8229c6ca50cea701e25a7ee25f48441b582ec5fa, 0626e6641f6b467447c81dd7678a69c66f7746cf to before 1fab1fa091f5aa97265648b53ea031deedd26235
Linux

Linux · 5.15
Linux

Component: Not specified by the source
File: fs/smb/server/transport_ipc.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68264

Affected technology

Linux · 67cf5b09a46f72e048501b84996f2f77bc42e947 to before 54ab81ae5f218452e64470cd8a8139bb5880fe2b, 67cf5b09a46f72e048501b84996f2f77bc42e947 to before 43bf001f0fe4e59bba47c897505222f959f4a1cc, 67cf5b09a46f72e048501b84996f2f77bc42e947 to before 89c2c41f0974e530b2d032c3695095aa0559adb1, 67cf5b09a46f72e048501b84996f2f77bc42e947 to before 1687a055a555347b002f406676a1aaae4668f242, 67cf5b09a46f72e048501b84996f2f77bc42e947 to before 210ac60a86a3ad2c76ae60e0dc71c34af6e7ea0b, 67cf5b09a46f72e048501b84996f2f77bc42e947 to before ca43ea29b4c4d2764aec8a26cffcfb677a871e6e, 67cf5b09a46f72e048501b84996f2f77bc42e947 to before 58df743faf21ceb1880f930aa5dd428e2a5e415d, 67cf5b09a46f72e048501b84996f2f77bc42e947 to before 892e1cf17555735e9d021ab036c36bc7b58b0e3b
Linux

Linux · 3.8
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: fs/ext4/inline.c

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68265

Affected technology

Linux · fe60e8c534118a288cd251a59d747cbf5c03e160 to before 4896491c497226022626c3acc46044fd182f943c, fe60e8c534118a288cd251a59d747cbf5c03e160 to before a505f0ba36ab24176c300d7ff56aff85c2977e6c, fe60e8c534118a288cd251a59d747cbf5c03e160 to before e8061d02b49c5c901980f58d91e96580e9a14acf, fe60e8c534118a288cd251a59d747cbf5c03e160 to before e7dac681790556c131854b97551337aa8042215b, fe60e8c534118a288cd251a59d747cbf5c03e160 to before 03b3bcd319b3ab5182bc9aaa0421351572c78ac0
Linux

Linux · 6.1
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: drivers/nvme/host/core.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68266

Affected technology

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d0c5ec1f57d8fbb953f166a27d9d32473dc8f3e4, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before aeccd6743ee4fdd1ab8cfcbb5b9a20b613418f6d, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8f73336b75bd3457b6f9410f2a0601a238f32238, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a9f626396bfe66f49b743601e862767928237cc0, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 77899444d46162aeb65f229590c26ba266864223, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a8cb796e7e2cb7971311ba236922f5e7e1be77e6, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 34ab4c75588c07cca12884f2bf6b0347c7a13872
Linux

Linux · 2.6.12
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: fs/bfs/inode.c

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality impact as none; integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68291

Affected technology

Linux · 9ea05fabce31ff93a0adae8221c58bc6d7b832f3 to before 46b8b58f93f1b383c3840fc6e8fab6c3bce9295f, 3a13454fd098ed51e733958488f8ec62859a9ed8 to before eee39f83246a81d970a9ecb7392b7ab74e660094, f6fb2cbc91a81178dea23d463503b4525a76825d to before 05f5e26d488cdc7abc2a826cf1071782d5a21203, c4f7b0916b95fd2226e5ab98882482b08f52e1c0 to before 88163f85d59b4164884df900ee171720fd26686b, ae155060247be8dcae3802a95bd1bdf93ab3215d to before f07f4ea53e22429c84b20832fa098b5ecc0d4e35
Linux

Linux · 6.1.159 to before 6.1.160, 6.6.119 to before 6.6.120, 6.12.60 to before 6.12.61, 6.17.10 to before 6.17.11
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/mptcp/protocol.c

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68325

Affected technology

Linux · de04ddd2980b48caa8d7e24a7db2742917a8b280 to before a3f4e3de41a3f115db35276c6b186ccbc913934a, 0dacfc5372e314d1219f03e64dde3ab495a5a25e to before 38abf6e931b169ea88d7529b49096f53a5dcf8fe, 710866fc0a64eafcb8bacd91bcb1329eb7e5035f to before fcb91be52eb6e92e00b533ebd7c77fecada537e1, aa12ee1c1bd260943fd6ab556d8635811c332eeb to before d01f0e072dadb02fe10f436b940dd957aff0d7d4, ff57186b2cc39766672c4c0332323933e5faaa88 to before 0b6216f9b3d1c33c76f74511026e5de5385ee520, 15de71d06a400f7fdc15bf377a2552b0ec437cf5 to before 529c284cc2815c8350860e9a31722050fe7117cb, 15de71d06a400f7fdc15bf377a2552b0ec437cf5 to before 3ed6c458530a547ed0c9ea0b02b19bab620be88b, 15de71d06a400f7fdc15bf377a2552b0ec437cf5 to before 9fefc78f7f02d71810776fdeb119a05a946a27cc, 7689ab22de36f8db19095f6bdf11f28cfde92f5c, 62d591dde4defb1333d202410609c4ddeae060b3, 5.10.241 to before 5.10.248, 5.15.190 to before 5.15.198, 6.1.149 to before 6.1.160, 6.6.103 to before 6.6.120, 6.12.44 to before 6.12.63, 5.4.297 to before 5.5, 6.16.4 to before 6.17
Linux

Linux · 6.17
Linux

Component: Not specified by the source
File: net/sched/sch_cake.c

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-68332

Affected technology

Linux · 2c89e159cd2f386285e9522d6476dd7e801bee22 to before 407b25bb9284d69c27309e691ab1e02f9e1c46ac, 2c89e159cd2f386285e9522d6476dd7e801bee22 to before f7fa1f4670c3c358a451546f0b80b9231952912d, 2c89e159cd2f386285e9522d6476dd7e801bee22 to before e8110402b0c24d822b0b933d87d50870d59667ef, 2c89e159cd2f386285e9522d6476dd7e801bee22 to before 72b3627b0d3b819de49b29c2c8cb1c64d54536b9, 2c89e159cd2f386285e9522d6476dd7e801bee22 to before 9fd8c8ad35c8d2390ce5ca2eb523c044bebdc072, 2c89e159cd2f386285e9522d6476dd7e801bee22 to before 698149d797d0178162f394c55d4ed52aa0e0b7f6, 2c89e159cd2f386285e9522d6476dd7e801bee22 to before 888f7e2847bcb9df8257e656e1e837828942c53b, 2c89e159cd2f386285e9522d6476dd7e801bee22 to before 72262330f7b3ad2130e800cecf02adcce3c32c77
Linux

Linux · 2.6.30
Linux

Component: Not specified by the source
Function: and
File: drivers/comedi/drivers/c6xdigio.c

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68335

Affected technology

Linux · 00aba6e7b5653a6607238ecdab7172318059d984 to before b2a5b172dc05be6c4f2c5542c1bbc6b14d60ff16, 00aba6e7b5653a6607238ecdab7172318059d984 to before 935ad4b3c325c24fff2c702da403283025ffc722, 00aba6e7b5653a6607238ecdab7172318059d984 to before 88d99ca5adbd01ff088f5fb2ddeba5755e085e52, 00aba6e7b5653a6607238ecdab7172318059d984 to before 5caa40e7c6a43e08e3574f990865127705c22861, 00aba6e7b5653a6607238ecdab7172318059d984 to before d948c53dec36dafe182631457597c49c1f1df5ea, 00aba6e7b5653a6607238ecdab7172318059d984 to before 877adccfacb32687b90714a27cfb09f444fdfa16, 00aba6e7b5653a6607238ecdab7172318059d984 to before a51f025b5038abd3d22eed2ede4cd46793d89565
Linux

Linux · 3.15
Linux

Component: Not specified by the source
Function: in
File: drivers/comedi/drivers/pcl818.c

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68336

Affected technology

Linux · 1a365e822372ba24c9da0822bc583894f6f3d821 to before 8e5b2cf10844402054b52b489b525dc30cc16908, 1a365e822372ba24c9da0822bc583894f6f3d821 to before c228cb699a07a5f2d596d186bc5c314c99bb8bbf, 1a365e822372ba24c9da0822bc583894f6f3d821 to before 93bd23524d63deb80fb85beb2e43fafeb1043d0f, 1a365e822372ba24c9da0822bc583894f6f3d821 to before 39d2ef113416f1a4205b03fb0aa2e428d1412c77, 1a365e822372ba24c9da0822bc583894f6f3d821 to before b163a5e8c703201c905d6ec7920ed79d167e8442, 1a365e822372ba24c9da0822bc583894f6f3d821 to before 16b3590c0e1e615757dade098c8fbc0d4f040c76, 1a365e822372ba24c9da0822bc583894f6f3d821 to before 396a9270a7b90886be501611b13aa636f2e8c703, 1a365e822372ba24c9da0822bc583894f6f3d821 to before c14ecb555c3ee80eeb030a4e46d00e679537f03a, 3106fb78d3579c8e9c9b3040f7f7841981919624, c0911024ff927ba5c4786b507004cb615be1d776, 09226e5c38639437565af01e6009a9286a351d04, c7673f01604fa722b9d7c1e29e17cec1b8ae09c5, c120c3dbeb76305235c8e557f84d9e2d7d0f5933, 4.4.209 to before 4.5, 4.9.209 to before 4.10, 4.14.164 to before 4.15, 4.19.95 to before 4.20, 5.4.11 to before 5.5
Linux

Linux · 5.5
Linux

Component: Not specified by the source
File: kernel/locking/spinlock_debug.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68337

Affected technology

Linux · 470decc613ab2048b619a01028072d932d9086ee to before 71bbe06c40fc59b5b15661eca8ff307f4176d7f9, 470decc613ab2048b619a01028072d932d9086ee to before ed62fd8c15d41c4127ad16b8219b63124f5962bc, 470decc613ab2048b619a01028072d932d9086ee to before 3faac6531d4818cd6be45e5bbf32937bbbc795c0, 470decc613ab2048b619a01028072d932d9086ee to before b4f8eabf6d991bd41fabcdf9302c4b3eab590cf4, 470decc613ab2048b619a01028072d932d9086ee to before a2a7f854d154a3e9232fec80782dad951655f52f, 470decc613ab2048b619a01028072d932d9086ee to before bf34c72337e40c4670cceeb79b353356933a254b, 470decc613ab2048b619a01028072d932d9086ee to before aa1703f3f706ea0867fb1991dcac709c9ec94cfb, 470decc613ab2048b619a01028072d932d9086ee to before 986835bf4d11032bba4ab8414d18fce038c61bb4
Linux

Linux · 2.6.19
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: fs/jbd2/transaction.c, system

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68344

Affected technology

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 488bf86d60077f52810c60dbdf7468c277880167, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d2f5d8cf1eadb7b33e476f59aa9c6653e4f2b937, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 4f811071e702fbb74933526e2fbadf8c4ed0c0c4, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 02b63f3bc29265bd9e83191792d200ed563acacf, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 5588b7c86effffa9bb55383a38800649d7b40778, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before bca11de0a277b8baeb7d006f93b543c907b6e782, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1823e08f76c68b9e1d26f6d5ef831b96f61a62a0, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 0c4a13ba88594fd4a27292853e736c6b4349823d
Linux

Linux · 2.6.12
Linux

Component: Not specified by the source
Function: has
File: sound/isa/wavefront/wavefront_synth.c

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and availability impact as none; integrity impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68345

Affected technology

Linux · 7b2f3eb492dac7665c75df067e4d8e4869589f4a to before e63f9c81ca28b06eeeac3630faddc50717897351, 7b2f3eb492dac7665c75df067e4d8e4869589f4a to before 7a35a505d76a4b6cd426b59ff2d800d0394cc5d3, 7b2f3eb492dac7665c75df067e4d8e4869589f4a to before e6ba921b17797ccc545d80e0dbccb5fab91c248c, 7b2f3eb492dac7665c75df067e4d8e4869589f4a to before c28946b7409b7b68fb0481ec738c8b04578b11c6, 7b2f3eb492dac7665c75df067e4d8e4869589f4a to before 343fa9800cf9870ec681e21f0a6f2157b74ae520, 7b2f3eb492dac7665c75df067e4d8e4869589f4a to before c34b04cc6178f33c08331568c7fd25c5b9a39f66
Linux

Linux · 5.17
Linux

Component: Not specified by the source
Function: can, also
File: sound/hda/codecs/side-codecs/cs35l41_hda.c

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68346

Affected technology

Linux · 58579c056c1c9510ae6695ed8e01ee05bbdcfb23 to before d6280a5b00cad37d9a9a875849e5bf7ed2fe4950, 58579c056c1c9510ae6695ed8e01ee05bbdcfb23 to before 3cf854cec0eb371da47ff5fe56eab189d7fa623a, 58579c056c1c9510ae6695ed8e01ee05bbdcfb23 to before 4a6ab0f6cc9bdfdfecbf257a46ff4275bd965af4, 58579c056c1c9510ae6695ed8e01ee05bbdcfb23 to before dea3ed2c16f99f46f97b1a090bf80ecdd6972ce0, 58579c056c1c9510ae6695ed8e01ee05bbdcfb23 to before c0a1fe1902ad23e6d48e0f68be1258ccf7a163e6, 58579c056c1c9510ae6695ed8e01ee05bbdcfb23 to before 932aa1e80b022419cf9710e970739b7a8794f27c, 58579c056c1c9510ae6695ed8e01ee05bbdcfb23 to before 1e1b3207a53e50d5a66289fffc1f7d52cd9c50f9, 58579c056c1c9510ae6695ed8e01ee05bbdcfb23 to before 324f3e03e8a85931ce0880654e3c3eb38b0f0bba
Linux

Linux · 4.18
Linux

Component: Not specified by the source
Function: detect_stream_formats
File: sound/firewire/dice/dice-extension.c

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68347

Affected technology

Linux · 634ec0b2906efd46f6f57977e172aa3470aca432 to before 16620f0617400746984362c3d6ac547eeae1d35f, 634ec0b2906efd46f6f57977e172aa3470aca432 to before ddd32ec66bc4eb6969fe835e4cc1c0706c6348fe, 634ec0b2906efd46f6f57977e172aa3470aca432 to before 6275fd726d53a8ec724f20201cf3bd862711e17b, 634ec0b2906efd46f6f57977e172aa3470aca432 to before 161291bac551821bba98eb4ea84c82338578d1b0, 634ec0b2906efd46f6f57977e172aa3470aca432 to before cdda0d06f8650e33255f79839f188bbece44117c, 634ec0b2906efd46f6f57977e172aa3470aca432 to before 210d77cca3d0494ed30a5c628b20c1d95fa04fb1
Linux

Linux · 5.16
Linux

Component: Not specified by the source
File: sound/firewire/motu/motu-hwdep.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68349

Affected technology

Linux · fe1cf9469d7bcb6af27e42eb555a41b0135bce4a to before 084bebe82ad86f718a3af84f34761863e63164ed, fe1cf9469d7bcb6af27e42eb555a41b0135bce4a to before b6e4e3a08c03200cc4b8067ec8ab3172a989d6fc, fe1cf9469d7bcb6af27e42eb555a41b0135bce4a to before 104080582ae0aa6dce6c6d75ff89062efe84673b, fe1cf9469d7bcb6af27e42eb555a41b0135bce4a to before f718f9ea6094843b8c059b073af49ad61e9f49bb, fe1cf9469d7bcb6af27e42eb555a41b0135bce4a to before 59947dff0fb7c19c09ce6dccbcd253fd542b6c25, fe1cf9469d7bcb6af27e42eb555a41b0135bce4a to before ca2e7fdad7c683b64821c94a58b9b68733214dad, fe1cf9469d7bcb6af27e42eb555a41b0135bce4a to before 38694f9aae00459ab443a7dc8b3949a6b33b560a, fe1cf9469d7bcb6af27e42eb555a41b0135bce4a to before e0f8058f2cb56de0b7572f51cd563ca5debce746
Linux

Linux · 4.10
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: fs/nfs/pnfs.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68351

Affected technology

linux kernel · from 6.12.23 (inclusive), before 6.12.68 (exclusive)
linux

linux kernel · from 6.12.59 (inclusive), before 6.13 (exclusive)
linux

linux kernel · from 6.13.11 (inclusive), before 6.14 (exclusive)
linux

linux kernel · from 6.14.1 (inclusive), before 6.18.2 (exclusive)
linux

linux kernel · 6.14
linux

linux kernel · 6.14 · update rc6
linux

linux kernel · 6.14 · update rc7
linux

Linux · 92075758782c5edb4c67d0da9e47586a624c22f7 to before fc9ce762525e73438d31b613f18bca92a4d3d578, 13940cef95491472760ca261b6713692ece9b946 to before d009ff8959d28d2a33aeb96a5f7e7161c421d78f, 13940cef95491472760ca261b6713692ece9b946 to before 9aee8de970f18c2aaaa348e3de86c38e2d956c1d, 0c8a1d2afd0dce0ea9257ab8c2271d8db6cb575d, 6c627bcc1896ba62ec793d0c00da74f3c93ce3ad, 6.12.23 to before 6.12.68, 6.13.11 to before 6.14
Linux

Linux · 6.14
Linux

Component: Not specified by the source
File: fs/exfat/namei.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68354

Affected technology

Linux · a06ccd9c3785fa5550917ae036944f4e080b5749 to before e1587064137028e7edcca14fb766b68d27bec94b, a06ccd9c3785fa5550917ae036944f4e080b5749 to before 9d041a7ba13f21adfac052eb3fda1df62f2166c1, a06ccd9c3785fa5550917ae036944f4e080b5749 to before a63fbc07d1b34a9821ea3b31ff4e6456f9d0aa61, a06ccd9c3785fa5550917ae036944f4e080b5749 to before 09811a83b214cc15521e0d818e43ae9043e9a28d, a06ccd9c3785fa5550917ae036944f4e080b5749 to before a9864d42ebcdd394ebb864643b961b36e7b515be, a06ccd9c3785fa5550917ae036944f4e080b5749 to before 431a1d44ad4866362cc28fc1cc4ca93d84989239, a06ccd9c3785fa5550917ae036944f4e080b5749 to before 64099b5c0aeb70bc7cd5556eb7f59c5b4a5010bf, a06ccd9c3785fa5550917ae036944f4e080b5749 to before 0cc15a10c3b4ab14cd71b779fd5c9ca0cb2bc30d
Linux

Linux · 3.13
Linux

Component: Not specified by the source
File: drivers/regulator/core.c

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68358

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68362

Affected technology

Linux · 6f7853f3cbe457067e9fe05461f56c7ea4ac488c to before 118e12bf3e4288cf845cd3759bd9d4c99f91aab5, 6f7853f3cbe457067e9fe05461f56c7ea4ac488c to before 6a96bd0d94305fd04a6ac64446ec113bae289384, 6f7853f3cbe457067e9fe05461f56c7ea4ac488c to before e2f3ea15e804607e0a4a34a2f6c331c8750b68bc, 6f7853f3cbe457067e9fe05461f56c7ea4ac488c to before dc153401fb26c1640a2b279c47b65e1c416af276, 6f7853f3cbe457067e9fe05461f56c7ea4ac488c to before 4758770a673c60d8f615809304d72e1432fa6355, 6f7853f3cbe457067e9fe05461f56c7ea4ac488c to before 638d4148e166d114a4cd7becaae992ce1a815ed8, 6f7853f3cbe457067e9fe05461f56c7ea4ac488c to before 5ebf0fe7eaef9f6173a4c6ea77c5353e21645d15, 6f7853f3cbe457067e9fe05461f56c7ea4ac488c to before b647d2574e4583c2e3b0ab35568f60c88e910840
Linux

Linux · 2.6.27
Linux

Component: Not specified by the source
File: drivers/net/wireless/realtek/rtl818x/rtl8187/dev.c

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68363

Affected technology

Linux · 34b2021cc61642d61c3cf943d9e71925b827941b to before b3171a5e4622e915e94599a55f4964078bdec27e, 34b2021cc61642d61c3cf943d9e71925b827941b to before 97b876fa88322625228792cf7a5fd77531815a80, 34b2021cc61642d61c3cf943d9e71925b827941b to before 30ce906557a21adef4cba5901c8e995dc18263a9, 34b2021cc61642d61c3cf943d9e71925b827941b to before 1c30e4afc5507f0069cc09bd561e510e4d97fbf7, 34b2021cc61642d61c3cf943d9e71925b827941b to before 942268e2726ac7f16e3ec49dbfbbbe7cf5af9da5, 34b2021cc61642d61c3cf943d9e71925b827941b to before d946f3c98328171fa50ddb908593cf833587f725
Linux

Linux · 5.12
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/core/filter.c

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68364

Affected technology

Linux · 8f603e567aa7a243e68ca48b4f105b990851360f to before cb34a55f552960c74e26b3699c84745b96e3131a, 8f603e567aa7a243e68ca48b4f105b990851360f to before 08b93c1c12c66989316883d733475c64d14de5d2, 8f603e567aa7a243e68ca48b4f105b990851360f to before 1ad2f81a099b8df5f72bce0a3e9f531263a846b8, 8f603e567aa7a243e68ca48b4f105b990851360f to before bcb94288d95cfc52f4d7cead260f4db54c8c741a, 8f603e567aa7a243e68ca48b4f105b990851360f to before e5c2503696ec2e0dc7b2aee902dc859ccde39ddf, 8f603e567aa7a243e68ca48b4f105b990851360f to before 7abbe41d22a06aae00fd46d29f59dd40a01e988f, 8f603e567aa7a243e68ca48b4f105b990851360f to before e5c52c320577cd405b251943ef77842dc6f303bf, 8f603e567aa7a243e68ca48b4f105b990851360f to before 8a7d58845fae061c62b50bc5eeb9bae4a1dedc3d
Linux

Linux · 3.0
Linux

Component: Not specified by the source
File: fs/ocfs2/move_extents.c

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68365

Affected technology

linux kernel · from 5.15 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.2 (exclusive)
linux

Linux · 82cae269cfa953032fbb8980a7d554d60fb00b17 to before bdf38063fd15f2fc7361dc0b5d3c259741eab835, 82cae269cfa953032fbb8980a7d554d60fb00b17 to before a58e29849aef8d26554a982989a2190b49aaf8ed, 82cae269cfa953032fbb8980a7d554d60fb00b17 to before 7d52c592cf53f5bb7163967edc01d2d7d80de44a, 82cae269cfa953032fbb8980a7d554d60fb00b17 to before f7728057220cabd720e27e46097edad48e5bd728, 82cae269cfa953032fbb8980a7d554d60fb00b17 to before 192e8ce302f14ac66259231dd10cede19858d742, 82cae269cfa953032fbb8980a7d554d60fb00b17 to before a8a3ca23bbd9d849308a7921a049330dc6c91398
Linux

Linux · 5.15
Linux

Component: Not specified by the source
File: fs/ntfs3/inode.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.2/10) rates confidentiality impact as low; integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68366

Affected technology

Linux · e46c7287b1c27683a8e30ca825fb98e2b97f1099 to before 330d688a5ca53857828081a3cf31b92ad1b0b3ed, e46c7287b1c27683a8e30ca825fb98e2b97f1099 to before cd93db1b1b4460e6ee77564024ea461e5940f69c, e46c7287b1c27683a8e30ca825fb98e2b97f1099 to before ae3e7bc1f4b393ae20e5c85583eb2c6977374716, e46c7287b1c27683a8e30ca825fb98e2b97f1099 to before 2e5e0665a594f076ef2b9439447bae8be293d09d, e46c7287b1c27683a8e30ca825fb98e2b97f1099 to before c9b99c948b4fb014812afe7b5ccf2db121d22e46, e46c7287b1c27683a8e30ca825fb98e2b97f1099 to before 9a38306643874566d20f7aba7dff9e6f657b51a9, e46c7287b1c27683a8e30ca825fb98e2b97f1099 to before c9e805f6a35d1dd189a9345595a5c20e87611942, e46c7287b1c27683a8e30ca825fb98e2b97f1099 to before 1649714b930f9ea6233ce0810ba885999da3b5d4
Linux

Linux · 4.12
Linux

Component: Not specified by the source
File: drivers/block/nbd.c

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68367

Affected technology

Linux · 99b089c3c38a83ebaeb1cc4584ddcde841626467 to before d5f1d40fd342b589420de7508b4c748fcf28122e, 99b089c3c38a83ebaeb1cc4584ddcde841626467 to before 14c209835e47a87e6da94bb9401e570dcc14f31f, 99b089c3c38a83ebaeb1cc4584ddcde841626467 to before 583d36523f56d8e9ddfa0bec20743a6faefc9b74, 99b089c3c38a83ebaeb1cc4584ddcde841626467 to before 61abf8c3162d155b4fd0fb251f08557093363a0a, 99b089c3c38a83ebaeb1cc4584ddcde841626467 to before 230621ffdb361d15cd3ef92d8b4fa8d314f4fad4, 99b089c3c38a83ebaeb1cc4584ddcde841626467 to before 388391dd1cc567fcf0b372b63d414c119d23e911, 99b089c3c38a83ebaeb1cc4584ddcde841626467 to before 48a7d427eb65922b3f17fbe00e2bbc7cb9eac381, 99b089c3c38a83ebaeb1cc4584ddcde841626467 to before 1e4b207ffe54cf33a4b7a2912c4110f89c73bf3f
Linux

Linux · 2.6.34
Linux

Component: Not specified by the source
File: drivers/macintosh/mac_hid.c

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68369

Affected technology

Linux · 63eb6730ce0604d3eacf036c2f68ea70b068317c to before 79c8a77b1782e2ace96d063be3c41ba540d1e20a, 78d46f5276ed3589aaaa435580068c5b62efc921 to before 433d1f7c628c3cbdd7efce064d6c7acd072cf6c4, 17249b2a65274f73ed68bcd1604e08a60fd8a278 to before 907bf69c6b6ce5d038eec7a599d67b45b62624bc, 37f65e68ba9852dc51c78dbb54a9881c3f0fe4f7 to before 6e17555728bc469d484c59db4a0abc65c19bc315, 57534db1bbc4ca772393bb7d92e69d5e7b9051cf to before 19164d8228317f3f1fe2662a9ba587cfe3b2d29e, 4e8011ffec79717e5fdac43a7e79faf811a384b7 to before ab5e8ebeee1caa4fcf8be7d8d62c0a7165469076, 4e8011ffec79717e5fdac43a7e79faf811a384b7 to before be99c62ac7e7af514e4b13f83c891a3cccefaa48, 5.15.197 to before 5.15.198, 6.1.159 to before 6.1.160, 6.6.117 to before 6.6.120, 6.12.58 to before 6.12.63, 6.17.8 to before 6.17.13
Linux

Linux · 6.18
Linux

Component: Not specified by the source
File: fs/ntfs3/inode.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68371

Affected technology

Linux · 2d80f4054f7f901b8ad97358a9069616ac8524c7 to before 7dfa5a5516ec3c6b9b6c22ee18f0eb2df3f38ef2, 2d80f4054f7f901b8ad97358a9069616ac8524c7 to before 6d2390653d82cad0e1ba2676e536dd99678f6ef1, 2d80f4054f7f901b8ad97358a9069616ac8524c7 to before eccc02ba1747501d92bb2049e3ce378ba372f641, 2d80f4054f7f901b8ad97358a9069616ac8524c7 to before 4e1acf1b6dd6dd0495bda139daafd7a403ae2dc1, 2d80f4054f7f901b8ad97358a9069616ac8524c7 to before 1a5c5a2f88e839af5320216a02ffb075b668596a, 2d80f4054f7f901b8ad97358a9069616ac8524c7 to before b518e86d1a70a88f6592a7c396cf1b93493d1aab
Linux

Linux · 6.0
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: drivers/scsi/smartpqi/smartpqi_init.c

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68372

Affected technology

Linux · 87aac3a80af5cbad93e63250e8a1e19095ba0d30 to before 198aa230a6f8c1f6af7ed26b29180749c3e79e4d, 87aac3a80af5cbad93e63250e8a1e19095ba0d30 to before d3ba312675911ff9e3fefefd551751e153a9f0a9, 87aac3a80af5cbad93e63250e8a1e19095ba0d30 to before 3692884bd6187d89d41eef81e5a9724519fd01c1, 87aac3a80af5cbad93e63250e8a1e19095ba0d30 to before 1ba2ced2bbdf7e64a30c3e88c70ea8bc208d1509, 87aac3a80af5cbad93e63250e8a1e19095ba0d30 to before 6b69593f72e1bfba6ca47ca8d9b619341fded7d6, 87aac3a80af5cbad93e63250e8a1e19095ba0d30 to before 443a1721806b6ff6303b5229e9811d68172d622f, 87aac3a80af5cbad93e63250e8a1e19095ba0d30 to before 742012f6bf29553fdc460bf646a58df3a7b43d01, 87aac3a80af5cbad93e63250e8a1e19095ba0d30 to before 9517b82d8d422d426a988b213fdd45c6b417b86d, 0a4e383fc3aa6540f804c4fd1184a96ae5de6ef8, 2ef6f4bd60411934e3fc2715442c2afe70f84bf3, 742fd49cf811ca164489e339b862e3fb8e240a73, 14df8724aeeef338172e2a2d6efadc989921ca0f, 4.14.204 to before 4.15, 4.19.155 to before 4.20, 5.4.75 to before 5.5, 5.9.5 to before 5.10
Linux

Linux · 5.10
Linux

Component: Not specified by the source
File: drivers/block/nbd.c

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68374

Affected technology

Linux · 4469315439827290923fce4f3f672599cabeb366 to before dc6d1249ee35c1c76700b4b96281daeb7637bce1, 4469315439827290923fce4f3f672599cabeb366 to before 21989cb5034c835b212385a2afadf279d8069da0, 4469315439827290923fce4f3f672599cabeb366 to before a4bd1caf591faeae44cb10b6517e7dacb5139bda, 4469315439827290923fce4f3f672599cabeb366 to before f98b191f78124405294481dea85f8a22a3eb0a59, 4469315439827290923fce4f3f672599cabeb366 to before 0dc76205549b4c25705e54345f211b9f66e018a0
Linux

Linux · 6.5
Linux

Component: Not specified by the source
File: drivers/md/md.c, drivers/md/md.h

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

A local attacker with low privileges could trigger a use-after-free error. Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not state a further attacker outcome.

CVE-2025-68378

Affected technology

Linux · ee2a098851bfbe8bcdd964c0121f4246f00ff41e to before d6028caa0ee39dccd005468adfa3223b92bd3ad3, ee2a098851bfbe8bcdd964c0121f4246f00ff41e to before d1f424a77b6bd27b361737ed73df49a0158f1590, ee2a098851bfbe8bcdd964c0121f4246f00ff41e to before 2a008f6de163279deffd488c1deab081bce5667c, ee2a098851bfbe8bcdd964c0121f4246f00ff41e to before 4669a8db976c8cbd5427fe9945f12c5fa5168ff3, ee2a098851bfbe8bcdd964c0121f4246f00ff41e to before 23f852daa4bab4d579110e034e4d513f7d490846, 90805175a206f784b6a77f16f07b07f6803e286b, 398ac11f4425d1e52aaf0d05d4fc90524e1a5b5e, e750f78c4ed7cefbcefb9769b3b9e08033db39da, 6c4f243b58f5362e983386488b2d563764c567af, 5.10.110 to before 5.11, 5.15.33 to before 5.16, 5.16.19 to before 5.17, 5.17.2 to before 5.18
Linux

Linux · 5.18
Linux

Component: Not specified by the source
File: kernel/bpf/stackmap.c

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68379

Affected technology

Linux · 8700e3e7c4857d28ebaa824509934556da0b3e76 to before 58aca869babd48cb9c3d6ee9e1452c4b9f5266a6, 8700e3e7c4857d28ebaa824509934556da0b3e76 to before b8f6eeb87a76b6fb1f6381b0b2894568e1b784f7, 8700e3e7c4857d28ebaa824509934556da0b3e76 to before 5dbeb421e137824aa9bd8358bdfc926a3965fc0d, 8700e3e7c4857d28ebaa824509934556da0b3e76 to before bc4c14a3863cc0e03698caec9a0cdabd779776ee, 8700e3e7c4857d28ebaa824509934556da0b3e76 to before 503a5e4690ae14c18570141bc0dcf7501a8419b0
Linux

Linux · 4.8
Linux

Component: Not specified by the source
File: drivers/infiniband/sw/rxe/rxe_srq.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68380

Affected technology

Linux · 61fe43e7216df6e9a912d831aafc7142fa20f280 to before 92791290e4f6a1de25d35af792ab8918a70737f6, 61fe43e7216df6e9a912d831aafc7142fa20f280 to before 4304bd7a334e981f189b9973056a58f84cc2b482, 61fe43e7216df6e9a912d831aafc7142fa20f280 to before 097c870b91817779e5a312c6539099a884b1fe2b, 61fe43e7216df6e9a912d831aafc7142fa20f280 to before 381096a417b7019896e93e86f4c585c592bf98e2, 61fe43e7216df6e9a912d831aafc7142fa20f280 to before 6b1a0da75932353f66e710976ca85a7131f647ff, 61fe43e7216df6e9a912d831aafc7142fa20f280 to before 4a013ca2d490c73c40588d62712ffaa432046a04
Linux

Linux · 5.16
Linux

Component: Not specified by the source
File: drivers/net/wireless/ath/ath11k/mac.c, drivers/net/wireless/ath/ath11k/wmi.c

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68724

Affected technology

Linux · 7901c1a8effbe5f89673bfc09d6e37b8f334f1a7 to before 60a7be5ee74408147e439164ac067e418ca74bb4, 7901c1a8effbe5f89673bfc09d6e37b8f334f1a7 to before c13c6e9de91d7f1dd7df756b1fa5a1f968839d76, 7901c1a8effbe5f89673bfc09d6e37b8f334f1a7 to before dfc1613961828745165aec6552c3818fa14ab725, 7901c1a8effbe5f89673bfc09d6e37b8f334f1a7 to before 5b8ac617c8dab5cad3c4dc8d84d0987808a0f99c, 7901c1a8effbe5f89673bfc09d6e37b8f334f1a7 to before c73be4f51eed98fa0c7c189db8f279e1c86bfbf7, 7901c1a8effbe5f89673bfc09d6e37b8f334f1a7 to before 6af753ac5205115e6c310c8c4236c01b59a1c44f, 7901c1a8effbe5f89673bfc09d6e37b8f334f1a7 to before b7090a5c153105b9fd221a5a81459ee8cd5babd6, 7901c1a8effbe5f89673bfc09d6e37b8f334f1a7 to before df0845cf447ae1556c3440b8b155de0926cbaa56
Linux

Linux · 3.18
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: crypto/asymmetric_keys/asymmetric_type.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68725

Affected technology

linux kernel · from 5.6 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.2 (exclusive)
linux

Linux · 850a88cc4096fe1df407452ba2e4d28cf5b3eee9 to before bb7902ed7d7f6d6a7c6c4dc25410d6127ce1085f, 850a88cc4096fe1df407452ba2e4d28cf5b3eee9 to before e0ffb64a2d72c6705b4a4c9efef600409f7e98a0, 850a88cc4096fe1df407452ba2e4d28cf5b3eee9 to before 768376ece7036ecb8604961793a1b72afe6345dd, 850a88cc4096fe1df407452ba2e4d28cf5b3eee9 to before 8670b53b8ee91f028f7240531064020b7413c461, 850a88cc4096fe1df407452ba2e4d28cf5b3eee9 to before 0f3a60869ca22024dfb9c6fce412b0c70cb4ea36, 850a88cc4096fe1df407452ba2e4d28cf5b3eee9 to before fbea4c63b5385588cb44ab21f91e55e33c719a54, 850a88cc4096fe1df407452ba2e4d28cf5b3eee9 to before 04a899573fb87273a656f178b5f920c505f68875
Linux

Linux · 5.6
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/bpf/test_run.c, net/core/filter.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68727

Affected technology

Linux · 78ab59fee07f22464f32eafebab2bd97ba94ff2d to before 90e23db1a85956026999c18e76f402542cb004da, 78ab59fee07f22464f32eafebab2bd97ba94ff2d to before 53f4d6cb97096590410f3719f75cdf9fc5120f37, 78ab59fee07f22464f32eafebab2bd97ba94ff2d to before dcb5e3cd96b77d52bb65988e4c914636a6d4fdd9, 78ab59fee07f22464f32eafebab2bd97ba94ff2d to before 4b1fd82848fdf0e01b3320815b261006c1722c3e, 78ab59fee07f22464f32eafebab2bd97ba94ff2d to before d88d4b455b6794f48d7adad52593f1700c7bd50e, 78ab59fee07f22464f32eafebab2bd97ba94ff2d to before b40a4eb4a0543d49686a6e693745009dac3b86a9, 78ab59fee07f22464f32eafebab2bd97ba94ff2d to before 9948dcb2f7b5a1bf8e8710eafaf6016e00be3ad6
Linux

Linux · 5.15
Linux

Component: Not specified by the source
File: fs/ntfs3/inode.c

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality impact as low; integrity and availability impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68728

Affected technology

Linux · 4342306f0f0d5ff4315a204d315c1b51b914fca5 to before afb144bc8e920db43a23e996eb0a6f9bdea84341, 4342306f0f0d5ff4315a204d315c1b51b914fca5 to before c70b3abfd530c7f574bc25a5f84707e6fdf0def8, 4342306f0f0d5ff4315a204d315c1b51b914fca5 to before 8bf729b96303bb862d7c6dc05edcf51274ae04cf, 4342306f0f0d5ff4315a204d315c1b51b914fca5 to before 7ce8f2028dfccb2161b905cf8ab85cdd9e93909c, 4342306f0f0d5ff4315a204d315c1b51b914fca5 to before 46f2a881e5a7311d41551edb3915e4d4e8802341, 4342306f0f0d5ff4315a204d315c1b51b914fca5 to before 81ffe9a265df3e41534726b852ab08792e3d374d, 4342306f0f0d5ff4315a204d315c1b51b914fca5 to before 73e6b9dacf72a1e7a4265eacca46f8f33e0997d6
Linux

Linux · 5.15
Linux

Component: Not specified by the source
File: fs/ntfs3/fsntfs.c

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality impact as high; integrity and availability impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68732

Affected technology

Linux · f5ba33fb9690566c382624637125827b5512e766 to before ca9388fba50dac2eb71c13702b7022a801bef90e, f5ba33fb9690566c382624637125827b5512e766 to before 4aeaece518fa4436af93d1d8b786200d9656ff4b, f5ba33fb9690566c382624637125827b5512e766 to before 6245cce711e2cdb2cc75c0bb8632952e36f8c972, f5ba33fb9690566c382624637125827b5512e766 to before 4e6e07ce0197aecfb6c4a62862acc93b3efedeb7, f5ba33fb9690566c382624637125827b5512e766 to before d138f73ffb0c57ded473c577719e6e551b7b1f27, f5ba33fb9690566c382624637125827b5512e766 to before 79197c6007f2afbfd7bcf5b9b80ccabf8483d774, f5ba33fb9690566c382624637125827b5512e766 to before c7d393267c497502fa737607f435f05dfe6e3d9b
Linux

Linux · 5.13
Linux

Component: Not specified by the source
File: drivers/gpu/host1x/syncpt.c

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68733

Affected technology

Linux · 38416e53936ecf896948fdeffc36b76979117952 to before c80173233014a360c13fa5cc79d36bfe6e53a8ed, 38416e53936ecf896948fdeffc36b76979117952 to before 6b1e45e13546c9ea0b1d99097993ac0aafae90b1, 38416e53936ecf896948fdeffc36b76979117952 to before 4a7a7621619a366712fb9cefcb6e69f956c247ce, 38416e53936ecf896948fdeffc36b76979117952 to before f8fd5491100f920847a3338d5fba22db19c72773, 38416e53936ecf896948fdeffc36b76979117952 to before ac9fce2efabad37c338aac86fbe100f77a080e59, 38416e53936ecf896948fdeffc36b76979117952 to before 64aa81250171b6bb6803e97ea7a5d73bfa061f6e, 38416e53936ecf896948fdeffc36b76979117952 to before 60e8d49989410a7ade60f5dadfcd979c117d05c0, 38416e53936ecf896948fdeffc36b76979117952 to before c147e13ea7fe9f118f8c9ba5e96cbd644b00d6b3
Linux

Linux · 4.4
Linux

Component: Not specified by the source
File: security/smack/smack_lsm.c

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and availability impact as none; integrity impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68740

Affected technology

Linux · 4af4662fa4a9dc62289c580337ae2506339c4729 to before d14e0ec6a6828ee0dffa163fb5d513c9a21f0a51, 4af4662fa4a9dc62289c580337ae2506339c4729 to before f2f4627b74c120fcdd8e1db93bc91f9bbaf46f85, 4af4662fa4a9dc62289c580337ae2506339c4729 to before 88cd5fbf5869731be8fc6f7cecb4e0d6ab3d8749, 4af4662fa4a9dc62289c580337ae2506339c4729 to before cca3e7df3c0f99542033657ba850b9a6d27f8784, 4af4662fa4a9dc62289c580337ae2506339c4729 to before c2238d487a640ae3511e1b6f4640ab27ce10d7f6, 4af4662fa4a9dc62289c580337ae2506339c4729 to before de4431faf308d0c533cb386f5fa9af009bc86158, 4af4662fa4a9dc62289c580337ae2506339c4729 to before 32952c4f4d1b2deb30dce72ba109da808a9018e1, 4af4662fa4a9dc62289c580337ae2506339c4729 to before 738c9738e690f5cea24a3ad6fd2d9a323cf614f6
Linux

Linux · 2.6.30
Linux

Component: Not specified by the source
Function: incorrectly
File: security/integrity/ima/ima_policy.c

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68741

Affected technology

Linux · 875386b98857822b77ac7f95bdf367b70af5b78c to before 4bccd506a1f1ab01d1f45b2a3effff6bedc73cf9, 875386b98857822b77ac7f95bdf367b70af5b78c to before 8e9f0a0717ba31d5842721627ade1e62d7aec012, 875386b98857822b77ac7f95bdf367b70af5b78c to before cfe3e2f768d248fd3d965d561d0768a56dd0b9f8, 875386b98857822b77ac7f95bdf367b70af5b78c to before 5fa1c8226b4532ad7011d295d3ab4ad45df105ae, 875386b98857822b77ac7f95bdf367b70af5b78c to before 78b1a242fe612a755f2158fd206ee6bb577d18ca
Linux

Linux · 6.6
Linux

Component: Not specified by the source
Function: may
File: drivers/scsi/qla2xxx/qla_nvme.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68742

Affected technology

Linux · 492ecee892c2a4ba6a14903d5d586ff750b7e805 to before 93d1964773ff513c9bd530f7686d3e48b786fa6b, 492ecee892c2a4ba6a14903d5d586ff750b7e805 to before bf2c990b012100610c0f1ec5c4ea434da2d080c2, 492ecee892c2a4ba6a14903d5d586ff750b7e805 to before 539137e3038ce6f953efd72110110f03c14c7d97, 492ecee892c2a4ba6a14903d5d586ff750b7e805 to before 56905bb70c8b88421709bb4e32fcba617aa37d41, 492ecee892c2a4ba6a14903d5d586ff750b7e805 to before 2579c356ccd35d06238b176e4b460978186d804b, 492ecee892c2a4ba6a14903d5d586ff750b7e805 to before 7dc211c1159d991db609bdf4b0fb9033c04adcbc
Linux

Linux · 5.1
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: include/linux/filter.h, kernel/bpf/syscall.c

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68744

Affected technology

Linux · 65334e64a493c6a0976de7ad56bf8b7a9ff04b4a to before 994d6303ed0b84cbc795bb5becf7ed6de40d3f3c, 65334e64a493c6a0976de7ad56bf8b7a9ff04b4a to before 3bf1378747e251571e0de15e7e0a6bf2919044e7, 65334e64a493c6a0976de7ad56bf8b7a9ff04b4a to before 96a5cb7072cabbac5c66ac9318242c3bdceebb68, 65334e64a493c6a0976de7ad56bf8b7a9ff04b4a to before 4a03d69cece145e4fb527464be29c3806aa3221e, 65334e64a493c6a0976de7ad56bf8b7a9ff04b4a to before 6af6e49a76c9af7d42eb923703e7648cb2bf401a
Linux

Linux · 6.4
Linux

Component: Not specified by the source
File: kernel/bpf/hashtab.c

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68746

Affected technology

Linux · 921fc1838fb036f690b8ba52e6a6d3644b475cbb to before 88db8bb7ed1bb474618acdf05ebd4f0758d244e2, 921fc1838fb036f690b8ba52e6a6d3644b475cbb to before 83309dd551cfd60a5a1a98d9cab19f435b44d46d, 921fc1838fb036f690b8ba52e6a6d3644b475cbb to before c934e40246da2c5726d14e94719c514e30840df8, 921fc1838fb036f690b8ba52e6a6d3644b475cbb to before 551060efb156c50fe33799038ba8145418cfdeef, 921fc1838fb036f690b8ba52e6a6d3644b475cbb to before bb0c58be84f907285af45657c1d4847b960a12bf, 921fc1838fb036f690b8ba52e6a6d3644b475cbb to before 01bbf25c767219b14c3235bfa85906b8d2cb8fbc, 921fc1838fb036f690b8ba52e6a6d3644b475cbb to before b4e002d8a7cee3b1d70efad0e222567f92a73000
Linux

Linux · 5.12
Linux

Component: Not specified by the source
File: drivers/spi/spi-tegra210-quad.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68749

Affected technology

linux kernel · from 6.8 (inclusive), before 6.12.68 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.17.13 (exclusive)
linux

linux kernel · from 6.18 (inclusive), before 6.18.2 (exclusive)
linux

Linux · 48aea7f2a2efae6a1bd201061c71a81b3f3b7e55 to before 0328bb097bef05a796217c54b3d651cc3782827c, 48aea7f2a2efae6a1bd201061c71a81b3f3b7e55 to before fb16493ebd8f171bcf0772262619618a131f30f7, 48aea7f2a2efae6a1bd201061c71a81b3f3b7e55 to before d71333ffdd3707d84cfb95acfaf8ba892adc066b, 48aea7f2a2efae6a1bd201061c71a81b3f3b7e55 to before 00812636df370bedf4e44a0c81b86ea96bca8628
Linux

Linux · 6.8
Linux

Component: Not specified by the source
File: drivers/accel/ivpu/ivpu_gem.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68753

Affected technology

Linux · 634ec0b2906efd46f6f57977e172aa3470aca432 to before ea2c921d9de6e32ca50cb817b9d57bb881be70de, 634ec0b2906efd46f6f57977e172aa3470aca432 to before 6d4f17782ce4facf3197e79707df411ee3d7b30a, 634ec0b2906efd46f6f57977e172aa3470aca432 to before 0d71b3c2ed742f1ccb3b0b7a61afb90c0251093f, 634ec0b2906efd46f6f57977e172aa3470aca432 to before df692cf2b601a54b34edfdb9e683d67483aa8ce1, 634ec0b2906efd46f6f57977e172aa3470aca432 to before 8f9e51cf2a2a43d0cd72d3dc0b5ccea3f639c187, 634ec0b2906efd46f6f57977e172aa3470aca432 to before 298e753880b6ea99ac30df34959a7a03b0878eed
Linux

Linux · 5.16
Linux

Component: Not specified by the source
File: sound/firewire/motu/motu-hwdep.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality impact as none; integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68755

Affected technology

Linux · 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c to before 6cbba922934805f86eece6ba7010b7201962695d, 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c to before 10d50bc913b69fa18a5c6fbf293c7a87962e22ef, 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c to before 6059a66dba7f26b21852831432e17075f1a1c783, 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c to before e463548fd80e779efea1cb2d3049b8a7231e6925, 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c to before 495df2da6944477d282d5cc0c13174d06e25b310
Linux

Linux · 5.6
Linux

Component: Not specified by the source
File: drivers/staging/most/Kconfig, drivers/staging/most/Makefile, drivers/staging/most/i2c/Kconfig, drivers/staging/most/i2c/Makefile, drivers/staging/most/i2c/i2c.c

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-68756

Affected technology

Linux · 98d81f0df70ce6fc48517d938026e3c684b9051a to before ca8764c0ea1fb825f17f19704af55e9e02c9f768, 98d81f0df70ce6fc48517d938026e3c684b9051a to before 3baeec23a82e7ee9691f434c6ab0ab1387326108, 98d81f0df70ce6fc48517d938026e3c684b9051a to before 6e8d363786765a81e35083e0909e076796468edf, 98d81f0df70ce6fc48517d938026e3c684b9051a to before ef0cd7b694928573f6569e61c14f5f059253162e, 98d81f0df70ce6fc48517d938026e3c684b9051a to before 59e25ef2b413c72da6686d431e7759302cfccafa
Linux

Linux · 6.2
Linux

Component: Not specified by the source
File: block/blk-mq.c

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-68757

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-68758

Affected technology

Linux · ae232e45acf9621f2c96b41ca3af006ac7552c33 to before 64739adf3eef063b8e2c72b7e919eac8c6480bf0, ae232e45acf9621f2c96b41ca3af006ac7552c33 to before cd01a24b3e52d6777b49c917d841f125fe9eebd0, ae232e45acf9621f2c96b41ca3af006ac7552c33 to before e06df738a9ad8417f1c4c7cd6992cda320e9e7ca, ae232e45acf9621f2c96b41ca3af006ac7552c33 to before 30cbe4b642745a9488a0f0d78be43afe69d7555c, ae232e45acf9621f2c96b41ca3af006ac7552c33 to before 0e63ea4378489e09eb5e920c8a50c10caacf563a, ae232e45acf9621f2c96b41ca3af006ac7552c33 to before 60a24070392ec726ccfe6ad1ca7b0381c8d8f7c9, ae232e45acf9621f2c96b41ca3af006ac7552c33 to before 08c9dc6b0f2c68e5e7c374ac4499e321e435d46c, ae232e45acf9621f2c96b41ca3af006ac7552c33 to before 9341d6698f4cfdfc374fb6944158d111ebe16a9d
Linux

Linux · 5.6
Linux

Component: Not specified by the source
File: drivers/video/backlight/led_bl.c

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-68759

Affected technology

Linux · f653211197f3841f383fa9757ef8ce182c6cf627 to before 3677c01891fb0239361e444afee8398868e34bdf, f653211197f3841f383fa9757ef8ce182c6cf627 to before 89caaeee8dd95fae8bb4f4964e6fe3ca688500c4, f653211197f3841f383fa9757ef8ce182c6cf627 to before a4fb7cca9837378878e6c94d9e7af019c8fdfcdb, f653211197f3841f383fa9757ef8ce182c6cf627 to before bf8513dfa31ea015c9cf415796dca2113d293840, f653211197f3841f383fa9757ef8ce182c6cf627 to before ee7db11742b30641f21306105ad27a275e3c61d7, f653211197f3841f383fa9757ef8ce182c6cf627 to before a813a74570212cb5f3a7d3b05c0cb0cd00bace1d, f653211197f3841f383fa9757ef8ce182c6cf627 to before c9d1c4152e6d32fa74034464854bee262a60bc43, f653211197f3841f383fa9757ef8ce182c6cf627 to before 9b5b9c042b30befc5b37e4539ace95af70843473
Linux

Linux · 2.6.25
Linux

Component: Not specified by the source
File: drivers/net/wireless/realtek/rtl818x/rtl8180/dev.c

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-68763

Affected technology

Linux · 7883d1b28a2b0e62edcacea22de6b36a1918b15a to before 6cd14414394b4f3d6e1ed64b8241d1fcc2271820, 7883d1b28a2b0e62edcacea22de6b36a1918b15a to before 0c3854d65cc4402cb8c52d4d773450a06efecab6, 7883d1b28a2b0e62edcacea22de6b36a1918b15a to before 1af5c973dd744e29fa22121f43e8646b7a7a71a7, 7883d1b28a2b0e62edcacea22de6b36a1918b15a to before 9b3f71cf02e04cfaa482155e3078707fe7f8aef4, 7883d1b28a2b0e62edcacea22de6b36a1918b15a to before e9eb52037a529fbb307c290e9951a62dd728b03d
Linux

Linux · 6.5
Linux

Component: Not specified by the source
File: drivers/crypto/starfive/jh7110-hash.c

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-68764

Affected technology

Linux · f2aedb713c284429987dc66c7aaf38decfc8da2a to before a3dc6c40bcab1a888d5c0d134ccc0746b4c98929, f2aedb713c284429987dc66c7aaf38decfc8da2a to before ba1495aefd22fcf0746a2a3025c95d766d7cde4d, f2aedb713c284429987dc66c7aaf38decfc8da2a to before c09070b4def1b34e473a746c6a5331ccb80902c1, f2aedb713c284429987dc66c7aaf38decfc8da2a to before dce10c59211e5cd763a62ea01e79b82a629811e3, f2aedb713c284429987dc66c7aaf38decfc8da2a to before 612cc98698d667df804792f0c47d4e501e66da29, f2aedb713c284429987dc66c7aaf38decfc8da2a to before 4b296944e632cf4c6a4cc8e2585c6451eae47b1b, f2aedb713c284429987dc66c7aaf38decfc8da2a to before df9b003a2ecacc7218486fbb31fe008c93097d5f, f2aedb713c284429987dc66c7aaf38decfc8da2a to before 8675c69816e4276b979ff475ee5fac4688f80125
Linux

Linux · 5.6
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: fs/nfs/namespace.c, fs/nfs/super.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68765

Affected technology

Linux · 99c457d902cf90bdc0df5d57e6156ec108711068 to before d6c91fc732698642f70c688324c98551b97b412c, 99c457d902cf90bdc0df5d57e6156ec108711068 to before 594ff8bb69e239678a8baa461827ce4bb90eff8f, 99c457d902cf90bdc0df5d57e6156ec108711068 to before 1c3c234af9407256ed670c8752923a672eea4225, 99c457d902cf90bdc0df5d57e6156ec108711068 to before 278bfed4529a0c9c9119f5a52ddafe69db61a75c, 99c457d902cf90bdc0df5d57e6156ec108711068 to before fb905e69941b44e03fe1a24e95328d45442b6d6d, 99c457d902cf90bdc0df5d57e6156ec108711068 to before 4d42aba0ee49c0aa015c50c4f2a07cf8fa1c3a49, 99c457d902cf90bdc0df5d57e6156ec108711068 to before 53d1548612670aa8b5d89745116cc33d9d172863
Linux

Linux · 5.7
Linux

Component: Not specified by the source
Function: returns
File: drivers/net/wireless/mediatek/mt76/mt7615/mcu.c

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-68766

Affected technology

Linux · 00fa3461c86dd289b441d4d5a6bb236064bd207b to before 324c60a67c4b9668497940f667db14d216cc7b1b, 00fa3461c86dd289b441d4d5a6bb236064bd207b to before c21c606ad398eeb86a0f3aaff9ba4f2665e286c6, 00fa3461c86dd289b441d4d5a6bb236064bd207b to before 3873afcb57614c1aaa5b6715554d6d1c22cac95a, 00fa3461c86dd289b441d4d5a6bb236064bd207b to before 09efe7cfbf919c4d763bc425473fcfee0dc98356, 00fa3461c86dd289b441d4d5a6bb236064bd207b to before efd65e2e2fd96f7aaa5cb07d79bbbfcfc80aa552, 00fa3461c86dd289b441d4d5a6bb236064bd207b to before 7dbc0d40d8347bd9de55c904f59ea44bcc8dedb7
Linux

Linux · 5.16
Linux

Component: Not specified by the source
File: drivers/irqchip/irq-mchp-eic.c

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-68767

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-68769

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-68770

Affected technology

Linux · 7f0a168b0441ef7fd6b46563efb2706c58ac2a4c to before 4b83902a1e67ff327ab5c6c65021a03e72c081d6, 7f0a168b0441ef7fd6b46563efb2706c58ac2a4c to before f17e0c1208485b24d61271bc1ddc8f2087e71561, 7f0a168b0441ef7fd6b46563efb2706c58ac2a4c to before 0373d5c387f24de749cc22e694a14b3a7c7eb515
Linux

Linux · 6.8
Linux

Component: Not specified by the source
File: drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68771

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-68772

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-68773

Affected technology

Linux · 60afe299bb541a928ba39bcb4ae8d3e428d1c5a5 to before c8f1d35076b78df61ace737e41cc1f4b7b63236c, 4badd33929c05ed314794b95f1af1308f7222be8 to before 9c34a4a2ead00979d203a8c16bea87f0ef5291d8, 7f6738e003b364783f3019fdf6e7645bc8dd1643 to before 837a23a11e0f734f096c7c7b0778d0e625e3dc87, fc96ec826bced75cc6b9c07a4ac44bbf651337ab to before 3dd6d01384823e1bd8602873153d6fc4337ac4fe, fc96ec826bced75cc6b9c07a4ac44bbf651337ab to before 743cebcbd1b2609ec5057ab474979cef73d1b681, fc96ec826bced75cc6b9c07a4ac44bbf651337ab to before be0b613198e6bfa104ad520397cab82ad3ec1771, fc96ec826bced75cc6b9c07a4ac44bbf651337ab to before 1417927df8049a0194933861e9b098669a95c762, 42c04316d9275ec267d36e5e9064cd56c9884148, dc120f2d35b030390a2bc0f94dd5f37e900cae91, b558275c1b040f0e5aa56c862241f9212b6118c3, b9d9e8856f1c83e4277403f9b4c369b322ebcb12, 36a6d0f66c874666caf4e8be155b1be30f6231be, 5.10.181 to before 5.10.248, 5.15.114 to before 5.15.198, 6.1.29 to before 6.1.160, 4.14.316 to before 4.15, 4.19.284 to before 4.20, 5.4.244 to before 5.5, 6.2.16 to before 6.3, 6.3.3 to before 6.4
Linux

Linux · 6.4
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: drivers/spi/spi-fsl-spi.c

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-68774

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-68775

Affected technology

Linux · 3b3009ea8abb713b022d94fba95ec270cf6e7eae to before 011ae80c49d9bfa5b4336f8bd387cd25c7593663, 3b3009ea8abb713b022d94fba95ec270cf6e7eae to before e1641177e7fb48a0a5a06658d4aab51da6656659, 3b3009ea8abb713b022d94fba95ec270cf6e7eae to before 3c330f1dee3cd92b57e19b9d21dc8ce5970b09be, 3b3009ea8abb713b022d94fba95ec270cf6e7eae to before 15564bd67e2975002f2a8e9defee33e321d3183f
Linux

Linux · 6.4
Linux

Component: Not specified by the source
File: net/handshake/request.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68776

Affected technology

Linux · f266a683a4804dc499efc6c2206ef68efed029d0 to before 3ce95a57d8a1f0e20b637cdeddaaed81831ca819, f266a683a4804dc499efc6c2206ef68efed029d0 to before c851e43b88b40bb7c20176c51cbf4f8c8d960dd9, f266a683a4804dc499efc6c2206ef68efed029d0 to before 7be6d25f4d974e44918ba3a5d58ebb9d36879087, f266a683a4804dc499efc6c2206ef68efed029d0 to before 8f289fa12926aae44347ca7d490e216555d8f255, f266a683a4804dc499efc6c2206ef68efed029d0 to before 1742974c24a9c1f1fd2e5edca0cbaccb720b397a, f266a683a4804dc499efc6c2206ef68efed029d0 to before 6220d38a08f8837575cd8f830928b49a3a5a5095, f266a683a4804dc499efc6c2206ef68efed029d0 to before 188e0fa5a679570ea35474575e724d8211423d17
Linux

Linux · 3.17
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/hsr/hsr_forward.c

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-68777

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-68778

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-68780

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-68782

Affected technology

Linux · 9e95fb805dc043cc8ed878a08d1583e4097a5f80 to before 6cac97b12bdab04832e0416d049efcd0d48d303b, 9e95fb805dc043cc8ed878a08d1583e4097a5f80 to before 45fd86b444105c8bd07a763f58635c87e5dc7aea, 9e95fb805dc043cc8ed878a08d1583e4097a5f80 to before 8727663ded659aad55eef21e3864ebf5a4796a96, 9e95fb805dc043cc8ed878a08d1583e4097a5f80 to before 0260ad551b0815eb788d47f32899fbcd65d6f128, 9e95fb805dc043cc8ed878a08d1583e4097a5f80 to before 0d36db68fdb8a3325386fd9523b67735f944e1f3, 9e95fb805dc043cc8ed878a08d1583e4097a5f80 to before 8edbb9e371af186b4cf40819dab65fafe109df4d, 9e95fb805dc043cc8ed878a08d1583e4097a5f80 to before 5053eab38a4c4543522d0c320c639c56a8b59908
Linux

Linux · 5.8
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: drivers/target/target_core_transport.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68783

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-68785

Affected technology

Linux · b2d0f5d5dc53532e6f07bc546a476a55ebdfe0f3 to before d0c135b8bbbcf92836068fd395bebeb7ae6c7bef, b2d0f5d5dc53532e6f07bc546a476a55ebdfe0f3 to before 3bc2efff20a38b2c7ca18317649715df0dd62ced, b2d0f5d5dc53532e6f07bc546a476a55ebdfe0f3 to before 1b569db9c2f28b599e40050524aae5f7332bc294, b2d0f5d5dc53532e6f07bc546a476a55ebdfe0f3 to before 10ffc558246f2c75619aedda0921906095e46702, b2d0f5d5dc53532e6f07bc546a476a55ebdfe0f3 to before 2ecfc4433acdb149eafd7fb22d7fd4adf90b25e9, b2d0f5d5dc53532e6f07bc546a476a55ebdfe0f3 to before c999153bfb2d1d9b295b7010d920f2a7c6d7595f, b2d0f5d5dc53532e6f07bc546a476a55ebdfe0f3 to before 5ace7ef87f059d68b5f50837ef3e8a1a4870c36e
Linux

Linux · 4.15
Linux

Component: Not specified by the source
File: net/openvswitch/flow_netlink.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68786

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-68787

Affected technology

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f77e538ac4e3adb1882d5bccb7bfdc111b5963d3, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 09efbf54eeaecebe882af603c9939a4b1bb9567e, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 73839497bbde5cd4fd02bbd9c8bc2640780ae65d, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 156a0f6341dce634a825db49ca20b48b1ae9bcc1, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8d1ccba4b171cd504ecfa47349cb9864fc9d687c, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 51f5fbc1681bdcffcc7d18bf3dfdb2b1278d3977, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 613d12dd794e078be8ff3cf6b62a6b9acf7f4619
Linux

Linux · 2.6.12
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/netrom/nr_out.c

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-68788

Affected technology

Linux · 72acc854427948efed7a83da27f7dc3239ac9afc to before df2711544b050aba703e6da418c53c7dc5d443ca, 72acc854427948efed7a83da27f7dc3239ac9afc to before 859bdf438f01d9aa7f84b09c1202d548c7cad9e8, 72acc854427948efed7a83da27f7dc3239ac9afc to before 6a7d7d96eeeab7af2bd01afbb3d9878a11a13d91, 72acc854427948efed7a83da27f7dc3239ac9afc to before e0643d46759db8b84c0504a676043e5e341b6c81, 72acc854427948efed7a83da27f7dc3239ac9afc to before 82f7416bcbd951549e758d15fc1a96a5afc2e900, 72acc854427948efed7a83da27f7dc3239ac9afc to before 7a93edb23bcf07a3aaf8b598edfc2faa8fbcc0b6, 72acc854427948efed7a83da27f7dc3239ac9afc to before 635bc4def026a24e071436f4f356ea08c0eed6ff
Linux

Linux · 2.6.36
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: fs/notify/fsnotify.c

What an attacker can do

The same user can subscribe for watching events on children when the user has access to the parent directory (e.g. /dev).

CVE-2025-68794

Affected technology

Linux · 9dc55f1389f9569acf9659e58dd836a9c70df217 to before ce20f49ac9194cf81a77f01d1c316d7c17ae753c, 9dc55f1389f9569acf9659e58dd836a9c70df217 to before 275b37a1e5c2c8abd313e8075f6aec9a349f291b, 9dc55f1389f9569acf9659e58dd836a9c70df217 to before b8c9f25fd84328c5fcc4f70c6d1e8f1d4787eaac, 9dc55f1389f9569acf9659e58dd836a9c70df217 to before 82b60ffbb532d919959702768dca04c3c0500ae5, 9dc55f1389f9569acf9659e58dd836a9c70df217 to before 12053695c8ef5410e8cc6c9ed4c0db9cd9c82b3e, 9dc55f1389f9569acf9659e58dd836a9c70df217 to before 142194fb21afe964d2d194cab1fc357cbf87e899, 9dc55f1389f9569acf9659e58dd836a9c70df217 to before 7aa6bc3e8766990824f66ca76c19596ce10daf3e
Linux

Linux · 4.19
Linux

Component: Not specified by the source
File: fs/iomap/buffered-io.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68795

Affected technology

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 3df375a1e75483b7d973c3cc2e46aa374db8428b, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f9dc0f45d2cd0189ce666288a29d2cc32c2e44d5, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 4afcb985355210e1688560dc47e64b94dad35d71, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ca9983bc3a1189bd72f9ae449d925a66b2616326, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7bea09f60f2ad5d232e2db8f1c14e850fd3fd416, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 4066b5b546293f44cd6d0e84ece6e3ee7ff27093, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7b07be1ff1cb6c49869910518650e8d0abc7d25f
Linux

Linux · 2.6.12
Linux

Component: Not specified by the source
File: net/ethtool/ioctl.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68796

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-68797

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-68798

Affected technology

Linux · ada543459cab7f653dcacdaba4011a8bb19c627c to before 49324a0c40f7e9bae1bd0362d23fc42232e14621, ada543459cab7f653dcacdaba4011a8bb19c627c to before 6e41d9ec8d7cc3f01b9ba785e05f0ebef8b3b37f, ada543459cab7f653dcacdaba4011a8bb19c627c to before e1028fb38b328084bc683a4efb001c95d3108573, ada543459cab7f653dcacdaba4011a8bb19c627c to before 43c2e5c2acaae50e99d1c20a5a46e367c442fb3b, ada543459cab7f653dcacdaba4011a8bb19c627c to before 866cf36bfee4fba6a492d2dcc5133f857e3446b0
Linux

Linux · 5.19
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: arch/x86/events/amd/core.c

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-68799

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-68800

Affected technology

Linux · f38656d067257cc43b652958dd154e1ab0773701 to before b957366f5611bbaba03dd10ef861283347ddcc88, f38656d067257cc43b652958dd154e1ab0773701 to before 6e367c361a523a4b54fe618215c64a0ee189caf0, f38656d067257cc43b652958dd154e1ab0773701 to before 37ca08b35a27ce8fd8e74dd3fd2ae21c23b63b73, f38656d067257cc43b652958dd154e1ab0773701 to before 5f2831fc593c2b2efbff7dd0dd7441cec76adcd5, f38656d067257cc43b652958dd154e1ab0773701 to before 216afc198484fde110ebeafc017992266f4596ce, f38656d067257cc43b652958dd154e1ab0773701 to before 4049a6ace209f4ed150429f86ae796d7d6a4c22b, f38656d067257cc43b652958dd154e1ab0773701 to before 8ac1dacec458f55f871f7153242ed6ab60373b90
Linux

Linux · 5.7
Linux

Component: Not specified by the source
File: drivers/net/ethernet/mellanox/mlxsw/spectrum_mr.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

A local attacker with low privileges can trigger a use-after-free error. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not state a further attacker outcome.

CVE-2025-68801

Affected technology

Linux · 6cf3c971dc84cb36579515ddb488919b9e9fb6de to before a2dfe6758fc63e542105bee8b17a3a7485684db0, 6cf3c971dc84cb36579515ddb488919b9e9fb6de to before 9e0a0d9eeb0dbeba2c83fa837885b19b8b9230fc, 6cf3c971dc84cb36579515ddb488919b9e9fb6de to before c437fbfd4382412598cdda1f8e2881b523668cc2, 6cf3c971dc84cb36579515ddb488919b9e9fb6de to before 4a3c569005f42ab5e5b2ad637132a33bf102cc08, 6cf3c971dc84cb36579515ddb488919b9e9fb6de to before ed8141b206bdcfd5d0b92c90832eeb77b7a60a0a, 6cf3c971dc84cb36579515ddb488919b9e9fb6de to before 675c5aeadf6472672c472dc0f26401e4fcfbf254, 6cf3c971dc84cb36579515ddb488919b9e9fb6de to before 8b0e69763ef948fb872a7767df4be665d18f5fd4
Linux

Linux · 4.8
Linux

Component: Not specified by the source
File: drivers/net/ethernet/mellanox/mlxsw/spectrum_router.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68803

Affected technology

Linux · c5409ce523af40d5c3019717bc5b4f72038d48be to before c182e1e0b7640f6bcc0c5ca8d473f7c57199ea3d, d52acd23a327cada5fb597591267cfc09f08bb1d to before 75f91534f9acdfef77f8fa094313b7806f801725, c0cbe70742f4a70893cd6e5f6b10b6e89b6db95b to before 60dbdef2ebc2317266a385e4debdb1bb0e57afe1, c0cbe70742f4a70893cd6e5f6b10b6e89b6db95b to before 381261f24f4e4b41521c0e5ef5cc0b9a786a9862, c0cbe70742f4a70893cd6e5f6b10b6e89b6db95b to before bf4e671c651534a307ab2fabba4926116beef8c3, c0cbe70742f4a70893cd6e5f6b10b6e89b6db95b to before 214b396480061cbc8b16f2c518b2add7fbfa5192, c0cbe70742f4a70893cd6e5f6b10b6e89b6db95b to before 913f7cf77bf14c13cfea70e89bcb6d0b22239562, 5.10.220 to before 5.10.248, 5.15.154 to before 5.15.198
Linux

Linux · 6.0
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
Function: returns
File: fs/nfsd/vfs.h

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · Low privileges required · User interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.0/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68804

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-68806

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-68808

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-68809

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-68810

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-68811

Affected technology

Linux · 8e122582680c6f8acd686a5a2af9c0e46fe90f2d to before e8623e9c451e23d84b870811f42fd872b4089ef6, 8e122582680c6f8acd686a5a2af9c0e46fe90f2d to before 2a77c8dd49bccf0ca232be7c836cec1209abb8da, 8e122582680c6f8acd686a5a2af9c0e46fe90f2d to before a8ee9099f30654917aa68f55d707b5627e1dbf77
Linux

Linux · 6.8
Linux

Component: Not specified by the source
File: net/sunrpc/xprtrdma/svc_rdma_rw.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68813

Affected technology

Linux · ed0de45a1008991fdaa27a0152befcb74d126a8b to before dd72a93c80408f06327dd2d956eb1a656d0b5903, ed0de45a1008991fdaa27a0152befcb74d126a8b to before 312d7cd88882fc6cadcc08b02287497aaaf94bcd, ed0de45a1008991fdaa27a0152befcb74d126a8b to before cdeff10851c37a002d87a035818ebd60fdb74447, ed0de45a1008991fdaa27a0152befcb74d126a8b to before 4729ff0581fbb7ad098b6153b76b6f5aac94618a, ed0de45a1008991fdaa27a0152befcb74d126a8b to before 25ab24df31f7af843c96a38e0781b9165216e1a8, ed0de45a1008991fdaa27a0152befcb74d126a8b to before 689a627d14788ad772e0fa24c2e57a23dbc7ce90, ed0de45a1008991fdaa27a0152befcb74d126a8b to before ad891bb3d079a46a821bf2b8867854645191bab0, 6c2fa855d8178699706b1192db2f1f8102b0ba1e, fbf569d2beee2a4a7a0bc8b619c26101d1211a88, ff71f99d5fb2daf54340e8b290d0bc4e6b4c1d38, 3d988fcddbe7b8673a231958bd2fba61b5a7ced9, 8a430e56a6485267a1b2d3747209d26c54d1a34b, 6bd1ee0a993fc9574ae43c1994c54a60cb23a380, 3.18.139 to before 3.19, 4.4.179 to before 4.5, 4.9.171 to before 4.10, 4.14.114 to before 4.15, 4.19.37 to before 4.20, 5.0.10 to before 5.1
Linux

Linux · 5.1
Linux

Component: Not specified by the source
File: net/netfilter/ipvs/ip_vs_xmit.c

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-68814

Affected technology

Linux · b9445598d8c60a1379887b957024b71343965f74 to before 2420ef01b2e836fbc05a0a8c73a1016504eb0458, b9445598d8c60a1379887b957024b71343965f74 to before 8f44c4a550570cd5903625133f938c6b51310c9b, b9445598d8c60a1379887b957024b71343965f74 to before 18b99fa603d0df5e1c898699c17d3b92ddc80746, b9445598d8c60a1379887b957024b71343965f74 to before e232269d511566b1f80872256a48593acc1becf4, b9445598d8c60a1379887b957024b71343965f74 to before 7fbfb85b05bc960cc50e09d03e5e562131e48d45, b9445598d8c60a1379887b957024b71343965f74 to before b14fad555302a2104948feaff70503b64c80ac01
Linux

Linux · 5.15
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
Function: returns
File: io_uring/openclose.c, being

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-68815

Affected technology

Linux · f517335a61ff8037b18ba1b0a002c1f82926a934 to before 58fdce6bc005e964f1dbc3ca716f5fe0f68839a2, cd9b50adc6bb9ad3f7d244590a389522215865c4 to before 02783a37cb1c0a2bd9fcba4ff1b81e6e209c7d87, cd9b50adc6bb9ad3f7d244590a389522215865c4 to before 8067db5c95aab9461d23117679338cd8869831fa, cd9b50adc6bb9ad3f7d244590a389522215865c4 to before 2f125ebe47d6369e562f3cbd9b6227cff51eaf34, cd9b50adc6bb9ad3f7d244590a389522215865c4 to before cca2ed931b734fe48139bc6f020e47367346630f, cd9b50adc6bb9ad3f7d244590a389522215865c4 to before 43d9a530c8c094d137159784e7c951c65f11ec6c, cd9b50adc6bb9ad3f7d244590a389522215865c4 to before b1e125ae425aba9b45252e933ca8df52a843ec70, d05330672afe2e142ba97e63bd7c1faef76781bb, 5.10.62 to before 5.10.248, 5.13.14 to before 5.14
Linux

Linux · 5.14
Linux

Component: Not specified by the source
File: net/sched/sch_ets.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68816

Affected technology

Linux · 70dd6fdb8987b14f7b6105f6be0617299e459398 to before 95624b731c490a4b849844269193a233d6d556a0, 70dd6fdb8987b14f7b6105f6be0617299e459398 to before 768d559f466cdd72849110a7ecd76a21d52dcfe3, 70dd6fdb8987b14f7b6105f6be0617299e459398 to before 38ac688b52ef26a88f8bc4fe26d24fdd0ff91e5d, 70dd6fdb8987b14f7b6105f6be0617299e459398 to before 8ac688c0e430dab19f6a9b70df94b1f635612c1a, 70dd6fdb8987b14f7b6105f6be0617299e459398 to before 45bd283b1d69e2c97cddcb9956f0e0261fc4efd7, 70dd6fdb8987b14f7b6105f6be0617299e459398 to before 8c35c2448086870509ede43947845be0833251f0, 70dd6fdb8987b14f7b6105f6be0617299e459398 to before b35966042d20b14e2d83330049f77deec5229749
Linux

Linux · 4.19
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: drivers/net/ethernet/mellanox/mlx5/core/diag/fw_tracer.c, drivers/net/ethernet/mellanox/mlx5/core/diag/fw_tracer.h

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-68817

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-68818

Affected technology

Linux · 231cfa78ec5badd84a1a2b09465bfad1a926aba1 to before b04b3733fff7e94566386b962e4795550fbdfd3d, d6f7377528d2abf338e504126e44439541be8f7d to before 50b097d92c99f718831b8b349722bc79f718ba1b, cd0a1804ac5bab2545ac700c8d0fe9ae9284c567 to before c5c37a821bd1708f26a9522b4a6f47b9f7a20003, 0367076b0817d5c75dfb83001ce7ce5c64d803a9 to before e9e601b7df58ba0c667baf30263331df2c02ffe1, 0367076b0817d5c75dfb83001ce7ce5c64d803a9 to before b10ebbfd59a535c8d22f4ede6e8389622ce98dc0, 0367076b0817d5c75dfb83001ce7ce5c64d803a9 to before 1c728951bc769b795d377852eae1abddad88635d, 0367076b0817d5c75dfb83001ce7ce5c64d803a9 to before b57fbc88715b6d18f379463f48a15b560b087ffe, 9189f20b4c5307c0998682bb522e481b4567a8b8, 415d614344a4f1bbddf55d724fc7eb9ef4b39aad, 5.10.177 to before 5.10.248, 5.15.105 to before 5.15.198, 6.1.22 to before 6.1.160, 5.4.240 to before 5.5, 6.2.9 to before 6.3
Linux

Linux · 6.3
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: drivers/scsi/qla2xxx/qla_os.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68819

Affected technology

Linux · 60688d5e6e6e2ae62f29762d1e3b2aec2dbd3817 to before c2c293ea7b61f12cdaad1e99a5b4efc58c88960a, 60688d5e6e6e2ae62f29762d1e3b2aec2dbd3817 to before c2305b4c5fc15e20ac06c35738e0578eb4323750, 60688d5e6e6e2ae62f29762d1e3b2aec2dbd3817 to before 61f214a878e96e2a8750bf96a98f78c658dba60c, 60688d5e6e6e2ae62f29762d1e3b2aec2dbd3817 to before 4a54d8fcb093761e4c56eb211cf4e39bf8401fa1, 60688d5e6e6e2ae62f29762d1e3b2aec2dbd3817 to before fe3e129ab49806aaaa3f22067ebc75c2dfbe4658, 60688d5e6e6e2ae62f29762d1e3b2aec2dbd3817 to before ac92151ff2494130d9fc686055d6bbb9743a673e, 60688d5e6e6e2ae62f29762d1e3b2aec2dbd3817 to before b91e6aafe8d356086cc621bc03e35ba2299e4788
Linux

Linux · 2.6.28
Linux

Component: Not specified by the source
File: drivers/media/usb/dvb-usb/dtv5100.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-68820

Affected technology

Linux · 76c365fa7e2a8bb85f0190cdb4b8cdc99b2fdce3 to before b72a3476f0c97d02f63a6e9fff127348d55436f6, f737418b6de31c962c7192777ee4018906975383 to before 3d8d22e75f7edfa0b30ff27330fd6a1285d594c3, cf9291a3449b04688b81e32621e88de8f4314b54 to before 190ad0f22ba49f1101182b80e3af50ca2ddfe72f, 362a90cecd36e8a5c415966d0b75b04a0270e4dd to before b5d942922182e82724b7152cb998f540132885ec, eb59cc31b6ea076021d14b04e7faab1636b87d0e to before 5b154e901fda2e98570b8f426a481f5740097dc2, c8e008b60492cf6fd31ef127aea6d02fd3d314cd to before ce5f54c065a4a7cbb92787f4f140917112350142, c8e008b60492cf6fd31ef127aea6d02fd3d314cd to before b97cb7d6a051aa6ebd57906df0e26e9e36c26d14, 6aff941cb0f7d0c897c3698ad2e30672709135e3, 3bc6317033f365ce578eb6039445fb66162722fd, 836e625b03a666cf93ff5be328c8cb30336db872, 5.10.237 to before 5.10.248, 5.15.181 to before 5.15.198, 6.1.135 to before 6.1.160, 6.6.88 to before 6.6.120, 6.12.24 to before 6.12.64, 5.4.293 to before 5.5, 6.13.12 to before 6.14, 6.14.3 to before 6.15
Linux

Linux · 6.15
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: fs/ext4/xattr.c

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-68821

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-68823

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71064

Affected technology

Linux · e2cb1dec9779ba2d89302a653eb0abaeb8682196 to before c149decd8c18ae6acdd7a6041d74507835cf26e6, e2cb1dec9779ba2d89302a653eb0abaeb8682196 to before bcefdb288eedac96fd2f583298927e9c6c481489, e2cb1dec9779ba2d89302a653eb0abaeb8682196 to before 6cd8a2930df850f4600fe8c57d0662b376520281, e2cb1dec9779ba2d89302a653eb0abaeb8682196 to before 1956d47a03eb625951e9e070db39fe2590e27510, e2cb1dec9779ba2d89302a653eb0abaeb8682196 to before 429f946a7af3fbf08761d218746cd4afa80a7954, e2cb1dec9779ba2d89302a653eb0abaeb8682196 to before 62f28d79a6186a602a9d926a2dbb5b12b6867df7, e2cb1dec9779ba2d89302a653eb0abaeb8682196 to before c2a16269742e176fccdd0ef9c016a233491a49ad
Linux

Linux · 4.16
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: drivers/net/ethernet/hisilicon/hns3/hns3vf/hclgevf_main.c

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71065

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71066

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71067

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71068

Affected technology

linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 6.0 (inclusive), before 6.6.120 (exclusive)
linux

linux kernel · from 6.12 (inclusive), before 6.12.64 (exclusive)
linux

linux kernel · from 6.18 (inclusive), before 6.18.3 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · d7cc73972661be4a02a1b09f1d9b3283c6c05154 to before a22316f5e9a29e4b92030bd8fb9435fe0eb1d5c9, d7cc73972661be4a02a1b09f1d9b3283c6c05154 to before 7ba826aae1d43212f3baa53a2175ad949e21926e, d7cc73972661be4a02a1b09f1d9b3283c6c05154 to before 5f140b525180c628db8fa6c897f138194a2de417, d7cc73972661be4a02a1b09f1d9b3283c6c05154 to before da1ccfc4c452541584a4eae89e337cfa21be6d5a, d7cc73972661be4a02a1b09f1d9b3283c6c05154 to before d1bea0ce35b6095544ee82bb54156fc62c067e58
Linux

Linux · 5.11
Linux

Component: Not specified by the source
File: net/sunrpc/xprtrdma/svc_rdma_rw.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71069

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71071

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71072

Affected technology

linux kernel · from 6.6.1 (inclusive), before 6.12.64 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.3 (exclusive)
linux

linux kernel · 6.6
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · a2e459555c5f9da3e619b7e47a63f98574dc75f1 to before 8fdbc6f9a994eb327868a4aa74a58953f31a2d0f, a2e459555c5f9da3e619b7e47a63f98574dc75f1 to before 4b0fe71fb3965d0db83cdfc2f4fe0b3227d70113, a2e459555c5f9da3e619b7e47a63f98574dc75f1 to before 4642686699a46718d7f2fb5acd1e9d866a9d9cca, a2e459555c5f9da3e619b7e47a63f98574dc75f1 to before e1b4c6a58304fd490124cc2b454d80edc786665c
Linux

Linux · 6.6
Linux

Component: Not specified by the source
File: fs/libfs.c, include/linux/fs.h, mm/shmem.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.2/10) rates confidentiality impact as none; integrity impact as low; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71075

Affected technology

linux kernel · from 2.6.19.1 (inclusive), before 5.10.248 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.3 (exclusive)
linux

linux kernel · 2.6.19
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 2908d778ab3e244900c310974e1fc1c69066e450 to before c8f6f88cd1df35155258285c4f43268b361819df, 2908d778ab3e244900c310974e1fc1c69066e450 to before 278455a82245a572aeb218a6212a416a98e418de, 2908d778ab3e244900c310974e1fc1c69066e450 to before b3e655e52b98a1d3df41c8e42035711e083099f8, 2908d778ab3e244900c310974e1fc1c69066e450 to before e354793a7ab9bb0934ea699a9d57bcd1b48fc27b, 2908d778ab3e244900c310974e1fc1c69066e450 to before a41dc180b6e1229ae49ca290ae14d82101c148c3, 2908d778ab3e244900c310974e1fc1c69066e450 to before 751c19635c2bfaaf2836a533caa3663633066dcf, 2908d778ab3e244900c310974e1fc1c69066e450 to before f6ab594672d4cba08540919a4e6be2e202b60007
Linux

Linux · 2.6.19
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
Function: fails
File: drivers/scsi/aic94xx/aic94xx_init.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71077

Affected technology

linux kernel · from 5.1.1 (inclusive), before 5.10.248 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.3 (exclusive)
linux

linux kernel · 5.1
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · bcfff8384f6c4e6627676ef07ccad9cfacd67849 to before 8ceee7288152bc121a6bf92997261838c78bfe06, bcfff8384f6c4e6627676ef07ccad9cfacd67849 to before 275c686f1e3cc056ec66c764489ec1fe1e51b950, bcfff8384f6c4e6627676ef07ccad9cfacd67849 to before ceb70d31da5671d298bad94ae6c20e4bbb800f96, bcfff8384f6c4e6627676ef07ccad9cfacd67849 to before d88481653d74d622d1d0d2c9bad845fc2cc6fd23, bcfff8384f6c4e6627676ef07ccad9cfacd67849 to before b69492161c056d36789aee42a87a33c18c8ed5e1, bcfff8384f6c4e6627676ef07ccad9cfacd67849 to before 858344bc9210bea9ab2bdc7e9e331ba84c164e50, bcfff8384f6c4e6627676ef07ccad9cfacd67849 to before faf07e611dfa464b201223a7253e9dc5ee0f3c9e
Linux

Linux · 5.1
Linux

Component: Not specified by the source
File: drivers/char/tpm/tpm-chip.c, drivers/char/tpm/tpm1-cmd.c, drivers/char/tpm/tpm2-cmd.c, include/linux/tpm.h

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71078

Affected technology

linux kernel · from 4.20.1 (inclusive), before 5.10.248 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.4 (exclusive)
linux

linux kernel · 4.20
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 5434ae74629af58ad0fc27143a9ea435f7734410 to before 01324c0328181b94cf390bda22ff91c75126ea57, 5434ae74629af58ad0fc27143a9ea435f7734410 to before 2e9a95d60f1df7b57618fd5ef057aef331575bd2, 5434ae74629af58ad0fc27143a9ea435f7734410 to before c9f865022a1823d814032a09906e91e4701a35fc, 5434ae74629af58ad0fc27143a9ea435f7734410 to before b13a3dbfa196af68eae2031f209743735ad416bf, 5434ae74629af58ad0fc27143a9ea435f7734410 to before 895123c309a34d2cfccf7812b41e17261a3a6f37, 5434ae74629af58ad0fc27143a9ea435f7734410 to before 4ae1e46d8a290319f33f71a2710a1382ba5431e8, 5434ae74629af58ad0fc27143a9ea435f7734410 to before 00312419f0863964625d6dcda8183f96849412c6
Linux

Linux · 4.20
Linux

Component: Not specified by the source
File: arch/powerpc/include/asm/book3s/64/mmu-hash.h, arch/powerpc/kernel/process.c, arch/powerpc/mm/book3s64/internal.h, arch/powerpc/mm/book3s64/mmu_context.c, arch/powerpc/mm/book3s64/slb.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71079

Affected technology

linux kernel · from 4.4.293 (inclusive), before 4.5 (exclusive)
linux

linux kernel · from 4.9.291 (inclusive), before 4.10 (exclusive)
linux

linux kernel · from 4.14.256 (inclusive), before 4.15 (exclusive)
linux

linux kernel · from 4.19.218 (inclusive), before 4.20 (exclusive)
linux

linux kernel · from 5.4.162 (inclusive), before 5.5 (exclusive)
linux

linux kernel · from 5.10.82 (inclusive), before 5.10.248 (exclusive)
linux

linux kernel · from 5.15.5 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16.1 (inclusive), before 6.1.160 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.4 (exclusive)
linux

linux kernel · 5.16
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 73a0d12114b4bc1a9def79a623264754b9df698e to before 2e0831e9fc46a06daa6d4d8d57a2738e343130c3, 8a9c61c3ef187d8891225f9b932390670a43a0d3 to before e02a1c33f10a0ed3aba855ab8ae2b6c4c5be8012, 3e3b5dfcd16a3e254aab61bd1e8c417dd4503102 to before ee41f4f3ccf8cd6ba3732e867abbec7e6d8d12e5, 3e3b5dfcd16a3e254aab61bd1e8c417dd4503102 to before 6b93c8ab6f6cda8818983a4ae3fcf84b023037b4, 3e3b5dfcd16a3e254aab61bd1e8c417dd4503102 to before 8fc4632fb508432895430cd02b38086bdd649083, 3e3b5dfcd16a3e254aab61bd1e8c417dd4503102 to before f3a8a7c1aa278f2378b2f3a10500c6674dffdfda, 3e3b5dfcd16a3e254aab61bd1e8c417dd4503102 to before 1ab526d97a57e44d26fadcc0e9adeb9c0c0182f5, 5ef16d2d172ee56714cff37cd005b98aba08ef5a, ff169909eac9e00bf1aa0af739ba6ddfb1b1d135, 47244ac0b65bd74cc70007d8e1bac68bd2baad19, c45cea83e13699bdfd47842e04d09dd43af4c371, 307d2e6cebfca9d92f86c8e2c8e3dd4a8be46ba6, 5.10.82 to before 5.10.248, 5.15.5 to before 5.15.198, 4.4.293 to before 4.5, 4.9.291 to before 4.10, 4.14.256 to before 4.15, 4.19.218 to before 4.20, 5.4.162 to before 5.5
Linux

Linux · 5.16
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/nfc/core.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71081

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71082

Affected technology

linux kernel · from 3.7.1 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.4 (exclusive)
linux

linux kernel · 3.7
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 98921dbd00c4e2e4bdd56423cb5edf98d57b45f7 to before fff9206b0907252a41eb12b7c1407b9347df18b1, 98921dbd00c4e2e4bdd56423cb5edf98d57b45f7 to before cca0e9206e3bcc63cd3e72193e60149165d493cc, 98921dbd00c4e2e4bdd56423cb5edf98d57b45f7 to before c0ecb3e4451fe94f4315e6d09c4046dfbc42090b, 98921dbd00c4e2e4bdd56423cb5edf98d57b45f7 to before 1e54c19eaf84ba652c4e376571093e58e144b339, 98921dbd00c4e2e4bdd56423cb5edf98d57b45f7 to before fdf7c640fb8a44a59b0671143d8c2f738bc48003, 98921dbd00c4e2e4bdd56423cb5edf98d57b45f7 to before 252714f1e8bdd542025b16321c790458014d6880
Linux

Linux · 3.7
Linux

Component: Not specified by the source
File: drivers/bluetooth/btusb.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71083

Affected technology

linux kernel · from 4.14.1 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.4 (exclusive)
linux

linux kernel · 4.14
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 09ac4fcb3f255e9225967c75f5893325c116cdbe to before 47a85604a761005d255ae38115ee630cc6931756, 09ac4fcb3f255e9225967c75f5893325c116cdbe to before 4b9944493c6d92d7b29cfd83aaf3deb842b8da79, 09ac4fcb3f255e9225967c75f5893325c116cdbe to before 3d004f7341d4898889801ebb2ef61ffca610dd6f, 09ac4fcb3f255e9225967c75f5893325c116cdbe to before 5a81095d3e1b521ac7cfe3b14d5f149bace3d6e0, 09ac4fcb3f255e9225967c75f5893325c116cdbe to before b94182b3d7228aec18d069cba56d5982e9bfe1b1, 09ac4fcb3f255e9225967c75f5893325c116cdbe to before 491adc6a0f9903c32b05f284df1148de39e8e644
Linux

Linux · 4.14
Linux

Component: Not specified by the source
File: drivers/gpu/drm/ttm/ttm_bo_vm.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71084

Affected technology

linux kernel · from 5.10.20 (inclusive), before 5.10.248 (exclusive)
linux

linux kernel · from 5.11.3 (inclusive), before 5.12 (exclusive)
linux

linux kernel · from 5.12.1 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.4 (exclusive)
linux

linux kernel · 5.12
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 60d613b39e8d0c9f3b526e9c96445422b4562d76 to before d5ce588a9552878859a4d44b70b724216c188a5f, fe454dc31e84f8c14cb8942fcb61666c9f40745b to before abf38398724ecc888f62c678d288da40d11878af, fe454dc31e84f8c14cb8942fcb61666c9f40745b to before ab668a58c4a2ccb6d54add7a76f2f955d15d0196, fe454dc31e84f8c14cb8942fcb61666c9f40745b to before c0acdee513239e1d6e1b490f56be0e6837dfd162, fe454dc31e84f8c14cb8942fcb61666c9f40745b to before 5cb34bb5fd726491b809efbeb5cfd63ae5bf9cf3, fe454dc31e84f8c14cb8942fcb61666c9f40745b to before 3ba6d01c4b3c584264dc733c6a2ecc5bbc8e0bb5, fe454dc31e84f8c14cb8942fcb61666c9f40745b to before 57f3cb6c84159d12ba343574df2115fb18dd83ca, a3262b3884dd67b4c5632ce7cdf9cff9d1a575d4, 5.10.20 to before 5.10.248, 5.11.3 to before 5.12
Linux

Linux · 5.12
Linux

Component: Not specified by the source
File: drivers/infiniband/core/cma.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71085

Affected technology

linux kernel · from 4.8.1 (inclusive), before 5.10.248 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.4 (exclusive)
linux

linux kernel · 4.8
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 2917f57b6bc15cc6787496ee5f2fdf17f0e9b7d3 to before 86f365897068d09418488165a68b23cb5baa37f2, 2917f57b6bc15cc6787496ee5f2fdf17f0e9b7d3 to before 6b7522424529556c9cbc15e15e7bd4eeae310910, 2917f57b6bc15cc6787496ee5f2fdf17f0e9b7d3 to before 2bb759062efa188ea5d07242a43e5aa5464bbae1, 2917f57b6bc15cc6787496ee5f2fdf17f0e9b7d3 to before c53aa6a5086f03f19564096ee084a202a8c738c0, 2917f57b6bc15cc6787496ee5f2fdf17f0e9b7d3 to before bf3709738d8a8cc6fa275773170c5c29511a0b24, 2917f57b6bc15cc6787496ee5f2fdf17f0e9b7d3 to before 73744ad5696dce0e0f43872aba8de6a83d6ad570, 2917f57b6bc15cc6787496ee5f2fdf17f0e9b7d3 to before 58fc7342b529803d3c221101102fe913df7adb83
Linux

Linux · 4.8
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/ipv6/calipso.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71086

Affected technology

linux kernel · from 4.19.304 (inclusive), before 4.20 (exclusive)
linux

linux kernel · from 5.4.266 (inclusive), before 5.5 (exclusive)
linux

linux kernel · from 5.10.206 (inclusive), before 5.10.248 (exclusive)
linux

linux kernel · from 5.15.146 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 6.1.70 (inclusive), before 6.1.160 (exclusive)
linux

linux kernel · from 6.6.9 (inclusive), before 6.6.120 (exclusive)
linux

linux kernel · from 6.7.1 (inclusive), before 6.12.64 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.4 (exclusive)
linux

linux kernel · 6.7
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 12e5a4719c99d7f4104e7e962393dfb8baa1c591 to before 819fb41ae54960f66025802400c9d3935eef4042, c0e527c532a07556ca44642f5873b002c44da22c to before ed2639414d43ba037f798eaf619e878309310451, 3e0d1585799d8a991eba9678f297fd78d9f1846e to before 1418c12cd3bba79dc56b57b61c99efe40f579981, ffced26692f83212aa09d0ece0213b23cc2f611d to before 9f6185a32496834d6980b168cffcccc2d6b17280, 64b8bc7d5f1434c636a40bdcfcd42b278d1714be to before b409ba9e1e63ccf3ab4cc061e33c1f804183543e, 64b8bc7d5f1434c636a40bdcfcd42b278d1714be to before 92d900aac3a5721fb54f3328f1e089b44a861c38, 64b8bc7d5f1434c636a40bdcfcd42b278d1714be to before 6595beb40fb0ec47223d3f6058ee40354694c8e4, bd7de4734535140fda33240c2335a07fdab6f88e, b10265532df7bc3666bc53261b7f03f0fd14b1c9, 5.10.206 to before 5.10.248, 5.15.146 to before 5.15.198, 6.1.70 to before 6.1.160, 6.6.9 to before 6.6.120, 4.19.304 to before 4.20, 5.4.266 to before 5.5
Linux

Linux · 6.7
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/rose/af_rose.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71087

Affected technology

linux kernel · from 4.7.1 (inclusive), before 5.10.248 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.4 (exclusive)
linux

linux kernel · 4.7
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 43a3d9ba34c9ca313573201d3f45de5ab3494cec to before ceb8459df28d22c225a82d74c0f725f2a935d194, 43a3d9ba34c9ca313573201d3f45de5ab3494cec to before 5bb18bfd505ca1affbca921462c350095a6c798c, 43a3d9ba34c9ca313573201d3f45de5ab3494cec to before d7369dc8dd7cbf5cee3a22610028d847b6f02982, 43a3d9ba34c9ca313573201d3f45de5ab3494cec to before 18de0e41d69d97fab10b91fecf10ae78a5e43232, 43a3d9ba34c9ca313573201d3f45de5ab3494cec to before f36de3045d006e6d9be1be495f2ed88d1721e752, 43a3d9ba34c9ca313573201d3f45de5ab3494cec to before 3095228e1320371e143835d0cebeef1a8a754c66, 43a3d9ba34c9ca313573201d3f45de5ab3494cec to before 6daa2893f323981c7894c68440823326e93a7d61
Linux

Linux · 4.7
Linux

Component: Not specified by the source
File: drivers/net/ethernet/intel/iavf/iavf_main.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71088

Affected technology

linux kernel · from 6.1.110 (inclusive), before 6.1.160 (exclusive)
linux

linux kernel · from 6.2.1 (inclusive), before 6.6.120 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.65 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.4 (exclusive)
linux

linux kernel · 6.2
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 01b7822700f2256900089e00390e119e1ad545df to before b5f46a08269265e2f5e87d855287d6d22de0a32b, 1e777f39b4d75e599a3aac8e0f67d739474f198c to before c9bf315228287653522894df9d851e9b43db9516, 1e777f39b4d75e599a3aac8e0f67d739474f198c to before 79f80a7a47849ef1b3c25a0bedcc448b9cb551c1, 1e777f39b4d75e599a3aac8e0f67d739474f198c to before 25f1ae942c097b7ae4ce5c2b9c6fefb8e3672b86, 1e777f39b4d75e599a3aac8e0f67d739474f198c to before 71154bbe49423128c1c8577b6576de1ed6836830, 6.1.110 to before 6.1.160
Linux

Linux · 6.2
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/mptcp/options.c, net/mptcp/protocol.h, net/mptcp/subflow.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71089

Affected technology

linux kernel · from 5.2 (inclusive), before 5.15.200 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.163 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.4 (exclusive)
linux

Linux · 26b25a2b98e45aeb40eedcedc586ad5034cbd984 to before b34289505180a83607fcfdce14b5a290d0528476, 26b25a2b98e45aeb40eedcedc586ad5034cbd984 to before 7cad37e358970af1bb49030ff01f06a69fa7d985, 26b25a2b98e45aeb40eedcedc586ad5034cbd984 to before 240cd7f2812cc25496b12063d11c823618f364e9, 26b25a2b98e45aeb40eedcedc586ad5034cbd984 to before c2c3f1a3fd74ef16cf115f0c558616a13a8471b4, 26b25a2b98e45aeb40eedcedc586ad5034cbd984 to before c341dee80b5df49a936182341b36395c831c2661, 26b25a2b98e45aeb40eedcedc586ad5034cbd984 to before 72f98ef9a4be30d2a60136dd6faee376f780d06c
Linux

Linux · 5.2
Linux

Component: Not specified by the source
File: drivers/iommu/iommu-sva.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

The source reports that an attacker could gain higher privileges under the conditions described by the source. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high.

CVE-2025-71091

Affected technology

linux kernel · from 3.11.1 (inclusive), before 5.10.248 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.4 (exclusive)
linux

linux kernel · 3.11
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 6c31ff366c1116823e77019bae3e92e9d77a49f4 to before 25029e813c4aae5fcf7118e8dd5c56e382b9a1a3, 6c31ff366c1116823e77019bae3e92e9d77a49f4 to before f820e438b8ec2a8354e70e75145f05fe45500d97, 6c31ff366c1116823e77019bae3e92e9d77a49f4 to before 53a727a8bfd78c739e130a781192d0f6f8e03d39, 6c31ff366c1116823e77019bae3e92e9d77a49f4 to before 6bfb62b6010a16112dcae52f490e5e0e6abe12a3, 6c31ff366c1116823e77019bae3e92e9d77a49f4 to before 107d245f84cb4f55f597d31eda34b42a2b7d6952, 6c31ff366c1116823e77019bae3e92e9d77a49f4 to before b71187648ef2349254673d0523fdf96d1fe3d758, 6c31ff366c1116823e77019bae3e92e9d77a49f4 to before 932ac51d9953eaf77a1252f79b656d4ca86163c6
Linux

Linux · 3.11
Linux

Component: Not specified by the source
File: drivers/net/team/team_core.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71093

Affected technology

linux kernel · from 3.18.1 (inclusive), before 5.10.248 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.4 (exclusive)
linux

linux kernel · 3.18
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 2037110c96d5f1dd71453fcd0d54e79be12a352b to before 4ccfa56f272241e8d8e2c38191fdbb03df489d80, 2037110c96d5f1dd71453fcd0d54e79be12a352b to before 278b7cfe0d4da7502c7fd679b15032f014c92892, 2037110c96d5f1dd71453fcd0d54e79be12a352b to before ad7a2a45e2417ac54089926b520924f8f0d91aea, 2037110c96d5f1dd71453fcd0d54e79be12a352b to before 2c4c0c09f9648ba766d399917d420d03e7b3e1f8, 2037110c96d5f1dd71453fcd0d54e79be12a352b to before 26c8bebc2f25288c2bcac7bc0a7662279a0e817c, 2037110c96d5f1dd71453fcd0d54e79be12a352b to before ee7c125fb3e8b04dd46510130b9fc92380e5d578, 2037110c96d5f1dd71453fcd0d54e79be12a352b to before 9c72a5182ed92904d01057f208c390a303f00a0f
Linux

Linux · 3.18
Linux

Component: Not specified by the source
File: drivers/net/ethernet/intel/e1000/e1000_main.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.1/10) rates confidentiality and availability impact as high; integrity impact as none. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71094

Affected technology

linux kernel · from 5.13.13 (inclusive), before 5.14 (exclusive)
linux

linux kernel · from 5.14.1 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.4 (exclusive)
linux

linux kernel · 5.14
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 7e88b11a862afe59ee0c365123ea5fb96a26cb3b to before fc96018f09f8d30586ca6582c5045a84eafef146, 7e88b11a862afe59ee0c365123ea5fb96a26cb3b to before f5f4f30f3811d37e1aa48667c36add74e5a8d99f, 7e88b11a862afe59ee0c365123ea5fb96a26cb3b to before 38722e69ee64dbb020028c93898d25d6f4c0e0b2, 7e88b11a862afe59ee0c365123ea5fb96a26cb3b to before 98a12c2547a44a5f03f35c108d2022cc652cbc4d, 7e88b11a862afe59ee0c365123ea5fb96a26cb3b to before bf8a0f3b787ca7c5889bfca12c60c483041fbee3, 7e88b11a862afe59ee0c365123ea5fb96a26cb3b to before a1e077a3f76eea0dc671ed6792e7d543946227e8, 4e4f3cb41d687bd64cd03358862b23c84d82329e, 5.13.13 to before 5.14
Linux

Linux · 5.14
Linux

Component: Not specified by the source
File: drivers/net/usb/asix_common.c, drivers/net/usb/ax88172a.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71095

Affected technology

linux kernel · from 5.13.1 (inclusive), before 6.1.160 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.4 (exclusive)
linux

linux kernel · 5.13
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · bba2556efad66e7eaa56fece13f7708caa1187f8 to before 3f7823219407f2f18044c2b72366a48810c5c821, bba2556efad66e7eaa56fece13f7708caa1187f8 to before 4d0ceb7677e1c4616afb96abb4518f70b65abb0d, bba2556efad66e7eaa56fece13f7708caa1187f8 to before 45ee0462b88396a0bd1df1991f801c89994ea72b, bba2556efad66e7eaa56fece13f7708caa1187f8 to before 5e5988736a95b1de7f91b10ac2575454b70e4897, bba2556efad66e7eaa56fece13f7708caa1187f8 to before a48e232210009be50591fdea8ba7c07b0f566a13
Linux

Linux · 5.13
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: drivers/net/ethernet/stmicro/stmmac/stmmac_main.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.1/10) rates confidentiality and availability impact as high; integrity impact as none. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71096

Affected technology

linux kernel · from 4.7.1 (inclusive), before 5.10.248 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.4 (exclusive)
linux

linux kernel · 4.7
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · ae43f8286730d1f2d241c34601df59f6d2286ac4 to before 376f46c8983458ead26cac83aa897a0b78491831, ae43f8286730d1f2d241c34601df59f6d2286ac4 to before bfe10318fc23e0b3f1d0a18dad387d29473a624d, ae43f8286730d1f2d241c34601df59f6d2286ac4 to before 45532638de5da24c201aa2a9b3dd4b054064de7b, ae43f8286730d1f2d241c34601df59f6d2286ac4 to before 9d85524789c2f17c0e87de8d596bcccc3683a1fc, ae43f8286730d1f2d241c34601df59f6d2286ac4 to before acadd4097d25d6bd472bcb3f9f3eba2b5105d1ec, ae43f8286730d1f2d241c34601df59f6d2286ac4 to before 0b948afc1ded88b3562c893114387f34389eeb94, ae43f8286730d1f2d241c34601df59f6d2286ac4 to before a7b8e876e0ef0232b8076972c57ce9a7286b47ca
Linux

Linux · 4.7
Linux

Component: Not specified by the source
File: drivers/infiniband/core/addr.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71097

Affected technology

linux kernel · from 5.3.1 (inclusive), before 5.10.248 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.4 (exclusive)
linux

linux kernel · 5.3
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 493ced1ac47c48bb86d9d4e8e87df8592be85a0e to before 5de7ad7e18356e39e8fbf7edd185a5faaf4f385a, 493ced1ac47c48bb86d9d4e8e87df8592be85a0e to before 33ff5c207c873215e54e6176624ed57423cb7dea, 493ced1ac47c48bb86d9d4e8e87df8592be85a0e to before 30386e090c49e803c0616a7147e43409c32a2b0e, 493ced1ac47c48bb86d9d4e8e87df8592be85a0e to before 5979338c83012110ccd45cae6517591770bfe536, 493ced1ac47c48bb86d9d4e8e87df8592be85a0e to before ee4183501ea556dca31f5ffd8690aa9fd25b609f, 493ced1ac47c48bb86d9d4e8e87df8592be85a0e to before e3fc381320d04e4a74311e576a86cac49a16fc43, 493ced1ac47c48bb86d9d4e8e87df8592be85a0e to before ac782f4e3bfcde145b8a7f8af31d9422d94d172a
Linux

Linux · 5.3
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/ipv4/fib_trie.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71098

Affected technology

linux kernel · from 3.7.1 (inclusive), before 5.10.248 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.4 (exclusive)
linux

linux kernel · 3.7
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · c12b395a46646bab69089ce7016ac78177f6001f to before 17e7386234f740f3e7d5e58a47b5847ea34c3bc2, c12b395a46646bab69089ce7016ac78177f6001f to before 41a1a3140aff295dee8063906f70a514548105e8, c12b395a46646bab69089ce7016ac78177f6001f to before adee129db814474f2f81207bd182bf343832a52e, c12b395a46646bab69089ce7016ac78177f6001f to before 1717357007db150c2d703f13f5695460e960f26c, c12b395a46646bab69089ce7016ac78177f6001f to before 5fe210533e3459197eabfdbf97327dacbdc04d60, c12b395a46646bab69089ce7016ac78177f6001f to before 91a2b25be07ce1a7549ceebbe82017551d2eec92, c12b395a46646bab69089ce7016ac78177f6001f to before db5b4e39c4e63700c68a7e65fc4e1f1375273476
Linux

Linux · 3.7
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/ipv6/ip6_gre.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71101

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71102

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71104

Affected technology

linux kernel · from 4.14.45 (inclusive), before 4.15 (exclusive)
linux

linux kernel · from 4.16.13 (inclusive), before 4.17 (exclusive)
linux

linux kernel · from 4.17.1 (inclusive), before 5.10.248 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.3 (exclusive)
linux

linux kernel · 4.17
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · d8f2f498d9ed0c5010bc1bbc1146f94c8bf9f8cc to before 786ed625c125c5cd180d6aaa37e653e3e4ffb8d9, d8f2f498d9ed0c5010bc1bbc1146f94c8bf9f8cc to before d2da0df7bbc4fb4fd7d0a1da704f81a09c72fe73, d8f2f498d9ed0c5010bc1bbc1146f94c8bf9f8cc to before 807dbe8f3862fa7c164155857550ce94b36a11b9, d8f2f498d9ed0c5010bc1bbc1146f94c8bf9f8cc to before 7b54ccef865e0aa62e4871d4ada2ba4b9dcb8bed, d8f2f498d9ed0c5010bc1bbc1146f94c8bf9f8cc to before e746e51947053a02af2ea964593dc4887108d379, d8f2f498d9ed0c5010bc1bbc1146f94c8bf9f8cc to before e23f46f1a971c73dad2fd63e1408696114ddebe2, d8f2f498d9ed0c5010bc1bbc1146f94c8bf9f8cc to before 18ab3fc8e880791aa9f7c000261320fc812b5465, 421e1fadb0b0a648cc75afd5b3c826fa7daeaffc, 5a69b7b69beae9bb86e7e1b095685087976cba47, 4.14.45 to before 4.15, 4.16.13 to before 4.17
Linux

Linux · 4.17
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: arch/x86/kvm/lapic.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71105

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71107

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71108

Affected technology

linux kernel · from 4.13.1 (inclusive), before 5.10.248 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.3 (exclusive)
linux

linux kernel · 4.13
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · c1b0bc2dabfa884dea49c02adaf3cd6b52b33d2f to before 07c8d2a109d847775b3b4e2c3294c8e1eea75432, c1b0bc2dabfa884dea49c02adaf3cd6b52b33d2f to before 58941bbb0050e365a98c64f1fc4a9a0ac127dba6, c1b0bc2dabfa884dea49c02adaf3cd6b52b33d2f to before f72f97d0aee4a993a35f2496bca5efd24827235d, c1b0bc2dabfa884dea49c02adaf3cd6b52b33d2f to before 914605b0de8128434eafc9582445306830748b93, c1b0bc2dabfa884dea49c02adaf3cd6b52b33d2f to before 3042a57a8e8bce4a3100c3f6f03dc372aab24943, c1b0bc2dabfa884dea49c02adaf3cd6b52b33d2f to before 132fe187e0d940f388f839fe2cde9b84106ad20d, c1b0bc2dabfa884dea49c02adaf3cd6b52b33d2f to before 30cd2cb1abf4c4acdb1ddb468c946f68939819fb
Linux

Linux · 4.13
Linux

Component: Not specified by the source
File: drivers/usb/typec/ucsi/ucsi.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71109

Affected technology

linux kernel · from 2.6.35.1 (inclusive), before 6.12.64 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.3 (exclusive)
linux

linux kernel · 2.6.35
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · e424054000878d7eb11e44289242886d6e219d22 to before 9cfda98cf02eacfa6b09076e98bd479fd73407c2, e424054000878d7eb11e44289242886d6e219d22 to before e3e33ac2eb69d595079a1a1e444c2fb98efdd42d, e424054000878d7eb11e44289242886d6e219d22 to before 7f39b9d0e86ed6236b9a5fb67616ab1f76c4f150, e424054000878d7eb11e44289242886d6e219d22 to before 36dac9a3dda1f2bae343191bc16b910c603cac25
Linux

Linux · 2.6.35
Linux

Component: Not specified by the source
Function: Tracer
File: arch/mips/kernel/ftrace.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality impact as none; integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71111

Affected technology

linux kernel · from 2.6.18.1 (inclusive), before 5.10.248 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.3 (exclusive)
linux

linux kernel · 2.6.18
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 9873964d6eb24bd0205394f9b791de9eddbcb855 to before 3dceb68f6ad33156032ef4da21a93d84059cca6d, 9873964d6eb24bd0205394f9b791de9eddbcb855 to before bf5b03227f2e6d4360004886d268f9df8993ef8f, 9873964d6eb24bd0205394f9b791de9eddbcb855 to before f2b579a0c37c0df19603d719894a942a295f634a, 9873964d6eb24bd0205394f9b791de9eddbcb855 to before f94800fbc26ccf7c81eb791707b038a57aa39a18, 9873964d6eb24bd0205394f9b791de9eddbcb855 to before a9fb6e8835a22f5796c1182ed612daed3fd273af, 9873964d6eb24bd0205394f9b791de9eddbcb855 to before c8cf0c2bdcccc6634b6915ff793b844e12436680, 9873964d6eb24bd0205394f9b791de9eddbcb855 to before 670d7ef945d3a84683594429aea6ab2cdfa5ceb4
Linux

Linux · 2.6.18
Linux

Component: Not specified by the source
File: drivers/hwmon/w83791d.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71112

Affected technology

linux kernel · from 5.3.1 (inclusive), before 5.10.248 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.3 (exclusive)
linux

linux kernel · 5.3
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · fe4144d47eef8453459c53a34e9d5940a3e6c219 to before 46c7d9fe8dd869ea5de666aba8c1ec1061ca44a8, fe4144d47eef8453459c53a34e9d5940a3e6c219 to before 42c91dfa772c57de141e5a55a187ac760c0fd7e1, fe4144d47eef8453459c53a34e9d5940a3e6c219 to before 00e56a7706e10b3d00a258d81fcb85a7e96372d6, fe4144d47eef8453459c53a34e9d5940a3e6c219 to before b7b4f3bf118f51b67691a55b464f04452e5dc6fc, fe4144d47eef8453459c53a34e9d5940a3e6c219 to before 95cca255a7a5ad782639ff0298c2a486707d1046, fe4144d47eef8453459c53a34e9d5940a3e6c219 to before 91a51d01be5c9f82c12c2921ca5cceaa31b67128, fe4144d47eef8453459c53a34e9d5940a3e6c219 to before 6ef935e65902bfed53980ad2754b06a284ea8ac1
Linux

Linux · 5.3
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_main.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71113

Affected technology

linux kernel · from 2.6.38.1 (inclusive), before 5.10.248 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.3 (exclusive)
linux

linux kernel · 2.6.38
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · fe869cdb89c95d060c77eea20204d6c91f233b53 to before e125c8e346e4eb7b3e854c862fcb4392bc13ddba, fe869cdb89c95d060c77eea20204d6c91f233b53 to before 543bf004e4eafbb302b1e6c78570d425d2ca13a0, fe869cdb89c95d060c77eea20204d6c91f233b53 to before f81244fd6b14fecfa93b66b6bb1d59f96554e550, fe869cdb89c95d060c77eea20204d6c91f233b53 to before 84238876e3b3b262cf62d5f4d1338e983fb27010, fe869cdb89c95d060c77eea20204d6c91f233b53 to before 5a4b65523608974a81edbe386f8a667a3e10c726, fe869cdb89c95d060c77eea20204d6c91f233b53 to before 51a5ab36084f3251ef87eda3e6a6236f6488925e, fe869cdb89c95d060c77eea20204d6c91f233b53 to before 6f6e309328d53a10c0fe1f77dec2db73373179b6
Linux

Linux · 2.6.38
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: crypto/af_alg.c, crypto/algif_hash.c, crypto/algif_rng.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71114

Affected technology

linux kernel · from 3.3.1 (inclusive), before 5.10.248 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.3 (exclusive)
linux

linux kernel · 3.3
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · dc3c56b703dad4aec8a9b3dd86f03a90d0c26a2d to before 1d56025a3af50db0f3da2792f41eb9943eee5324, dc3c56b703dad4aec8a9b3dd86f03a90d0c26a2d to before c7b986adc9e9336066350542ac5a2005d305ae78, dc3c56b703dad4aec8a9b3dd86f03a90d0c26a2d to before 47c910965c936724070d2a8094a4c3ed8f452856, dc3c56b703dad4aec8a9b3dd86f03a90d0c26a2d to before d2c7c90aca7b37f60f16b2bedcfeb16204f2f35d, dc3c56b703dad4aec8a9b3dd86f03a90d0c26a2d to before f7b6370d0fbee06a867037d675797a606cb62e57, dc3c56b703dad4aec8a9b3dd86f03a90d0c26a2d to before c6a2dd4f2e4e6cbdfe7a1618160281af897b75db, dc3c56b703dad4aec8a9b3dd86f03a90d0c26a2d to before 7aa31ee9ec92915926e74731378c009c9cc04928
Linux

Linux · 3.3
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: drivers/watchdog/via_wdt.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71116

Affected technology

linux kernel · from 3.9.1 (inclusive), before 5.10.248 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.3 (exclusive)
linux

linux kernel · 3.9
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 4f6a7e5ee1393ec4b243b39dac9f36992d161540 to before d061be4c8040ffb1110d537654a038b8b6ad39d2, 4f6a7e5ee1393ec4b243b39dac9f36992d161540 to before 145d140abda80e33331c5781d6603014fa75d258, 4f6a7e5ee1393ec4b243b39dac9f36992d161540 to before c82e39ff67353a5a6cbc07b786b8690bd2c45aaa, 4f6a7e5ee1393ec4b243b39dac9f36992d161540 to before e927ab132b87ba3f076705fc2684d94b24201ed1, 4f6a7e5ee1393ec4b243b39dac9f36992d161540 to before 5d0d8c292531fe356c4e94dcfdf7d7212aca9957, 4f6a7e5ee1393ec4b243b39dac9f36992d161540 to before 2acb8517429ab42146c6c0ac1daed1f03d2fd125, 4f6a7e5ee1393ec4b243b39dac9f36992d161540 to before 8c738512714e8c0aa18f8a10c072d5b01c83db39
Linux

Linux · 3.9
Linux

Component: Not specified by the source
File: net/ceph/osdmap.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.1/10) rates confidentiality and availability impact as high; integrity impact as none. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71118

Affected technology

linux kernel · from 2.6.12.1 (inclusive), before 5.10.248 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.3 (exclusive)
linux

linux kernel · 2.6.12
linux

linux kernel · 2.6.12 · update rc2
linux

linux kernel · 2.6.12 · update rc3
linux

linux kernel · 2.6.12 · update rc4
linux

linux kernel · 2.6.12 · update rc5
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b84edef48cc8afb41150949a87dcfa81bc95b53e, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ecb296286c8787895625bd4c53e9478db4ae139c, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7f9b951ed11842373851dd3c91860778356d62d3, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1bc34293dfbd266c29875206849b4f8e8177e6df, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 0d8bb08126920fd4b12dbf32d9250757c9064b36, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f91dad0a3b381244183ffbea4cec5a7a69d6f41e, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 9d6c58dae8f6590c746ac5d0012ffe14a77539f0
Linux

Linux · 2.6.12
Linux

Component: Not specified by the source
File: drivers/acpi/acpica/nswalk.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71119

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71120

Affected technology

linux kernel · from 4.19.99 (inclusive), before 4.20 (exclusive)
linux

linux kernel · from 5.4.15 (inclusive), before 5.5 (exclusive)
linux

linux kernel · from 5.5.1 (inclusive), before 5.10.248 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.3 (exclusive)
linux

linux kernel · 5.5
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 5866efa8cbfbadf3905072798e96652faf02dbe8 to before a8f1e445ce3545c90d69c9e8ff8f7821825fe810, 5866efa8cbfbadf3905072798e96652faf02dbe8 to before 4dedb6a11243a5c9eb9dbb97bca3c98bd725e83d, 5866efa8cbfbadf3905072798e96652faf02dbe8 to before f9e53f69ac3bc4ef568b08d3542edac02e83fefd, 5866efa8cbfbadf3905072798e96652faf02dbe8 to before 7452d53f293379e2c38cfa8ad0694aa46fc4788b, 5866efa8cbfbadf3905072798e96652faf02dbe8 to before a2c6f25ab98b423f99ccd94874d655b8bcb01a19, 5866efa8cbfbadf3905072798e96652faf02dbe8 to before 1c8bb965e9b0559ff0f5690615a527c30f651dd8, 5866efa8cbfbadf3905072798e96652faf02dbe8 to before d4b69a6186b215d2dc1ebcab965ed88e8d41768d, 66ed7b413d31c6ff23901ac4443b1cc1af2f6113, 7be8c165dc81564705e8e0b72d398ef708f67eaa, 4.19.99 to before 4.20, 5.4.15 to before 5.5
Linux

Linux · 5.5
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/sunrpc/auth_gss/svcauth_gss.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71121

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71122

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71123

Affected technology

linux kernel · from 5.4.301 (inclusive), before 5.5 (exclusive)
linux

linux kernel · from 5.10.246 (inclusive), before 5.10.248 (exclusive)
linux

linux kernel · from 6.1.158 (inclusive), before 6.1.160 (exclusive)
linux

linux kernel · from 6.6.114 (inclusive), before 6.6.120 (exclusive)
linux

linux kernel · from 6.12.54 (inclusive), before 6.12.64 (exclusive)
linux

linux kernel · from 6.17.4 (inclusive), before 6.18 (exclusive)
linux

linux kernel · from 6.18.1 (inclusive), before 6.18.3 (exclusive)
linux

linux kernel · 6.18
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · b2bac84fde28fb6a88817b8b761abda17a1d300b to before 52ac96c4a2dd7bc47666000440b0602d9742e820, e651294218d2684302ee5ed95ccf381646f3e5b4 to before 6e37143560e37869d51b7d9e0ac61fc48895f8a0, 01829af7656b56d83682b3491265d583d502e502 to before 902ca2356f1e3ec5355c5808ad5d3f9d0095b0cc, 2a0cf438320cdb783e0378570744c0ef0d83e934 to before db9ee13fab0267eccf6544ee35b16c9522db9aac, 8ecb790ea8c3fc69e77bace57f14cf0d7c177bd8 to before 5bbacbbf1ca4419861dca3c6b82707c10e9c021c, 8ecb790ea8c3fc69e77bace57f14cf0d7c177bd8 to before ee5a977b4e771cc181f39d504426dbd31ed701cc, 7bf46ff83a0ef11836e38ebd72cdc5107209342d, a6e94557cd05adc82fae0400f6e17745563e5412, 5.10.246 to before 5.10.248, 6.1.158 to before 6.1.160, 6.6.114 to before 6.6.120, 6.12.54 to before 6.12.64, 5.4.301 to before 5.5, 6.17.4 to before 6.18
Linux

Linux · 6.18
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: fs/ext4/super.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71125

Affected technology

linux kernel · from 4.17.1 (inclusive), before 5.10.248 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.3 (exclusive)
linux

linux kernel · 4.17
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 4b147936fa509650beaf638b331573c23ba4d609 to before 6819bc6285c0ff835f67cfae7efebc03541782f6, 4b147936fa509650beaf638b331573c23ba4d609 to before 6d15f08e6d8d4b4fb02d90805ea97f3e2c1d6fbc, 4b147936fa509650beaf638b331573c23ba4d609 to before f7305697b60d79bc69c0a6e280fc931b4e8862dd, 4b147936fa509650beaf638b331573c23ba4d609 to before 65b1971147ec12f0b1cee0811c859a3d7d9b04ce, 4b147936fa509650beaf638b331573c23ba4d609 to before 3437c775bf209c674ad66304213b6b3c3b1b3f69, 4b147936fa509650beaf638b331573c23ba4d609 to before 6df47e5bb9b62d72f186f826ab643ea1856877c7, 4b147936fa509650beaf638b331573c23ba4d609 to before ef7f38df890f5dcd2ae62f8dbde191d72f3bebae
Linux

Linux · 4.17
Linux

Component: Not specified by the source
File: kernel/trace/trace_events.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71126

Affected technology

linux kernel · from 6.1.149 (inclusive), before 6.1.160 (exclusive)
linux

linux kernel · from 6.6.101 (inclusive), before 6.6.120 (exclusive)
linux

linux kernel · from 6.12.40 (inclusive), before 6.12.64 (exclusive)
linux

linux kernel · from 6.15.8 (inclusive), before 6.16 (exclusive)
linux

linux kernel · from 6.16.1 (inclusive), before 6.18.3 (exclusive)
linux

linux kernel · 6.16
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 5586518bec27666c747cd52aabb62d485686d0bf to before 0107442e82c0f8d6010e07e6030741c59c520d6e, 75a4c9ab8a7af0d76b31ccd1188ed178c38b35d2 to before 252892d5a6a2f163ce18f32716e46fa4da7d4e79, 54999dea879fecb761225e28f274b40662918c30 to before 0ca9fb4335e726dab4f23b3bfe87271d8f005f41, f8a1d9b18c5efc76784f5a326e905f641f839894 to before 50f47c02be419bf0a3ae94c118addf67beef359f, f8a1d9b18c5efc76784f5a326e905f641f839894 to before ffb8c27b0539dd90262d1021488e7817fae57c42, 1d82a8fe6ee4afdc92f4e8808c9dad2a6095bbc5, 6.1.149 to before 6.1.160, 6.6.101 to before 6.6.120, 6.12.40 to before 6.12.64, 6.15.8 to before 6.16
Linux

Linux · 6.16
Linux

Component: Not specified by the source
File: net/mptcp/protocol.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71127

Affected technology

linux kernel · from 5.7.1 (inclusive), before 5.10.248 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.65 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.4 (exclusive)
linux

linux kernel · 5.7
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · af2d14b01c32d7cba65f73503586e5b621afb139 to before be0974be5c42584e027883ac2af7dab5e950098c, af2d14b01c32d7cba65f73503586e5b621afb139 to before 0a59a3895f804469276d188effa511c72e752f35, af2d14b01c32d7cba65f73503586e5b621afb139 to before 88aab153d1528bc559292a12fb5105ee97528e1f, af2d14b01c32d7cba65f73503586e5b621afb139 to before 6e5bff40bb38741e40c33043ba0816fba5f93661, af2d14b01c32d7cba65f73503586e5b621afb139 to before 7b240a8935d554ad36a52c2c37c32039f9afaef2, af2d14b01c32d7cba65f73503586e5b621afb139 to before a21704df4024708be698fb3fd5830d5b113b70e0, af2d14b01c32d7cba65f73503586e5b621afb139 to before 193d18f60588e95d62e0f82b6a53893e5f2f19f8
Linux

Linux · 5.7
Linux

Component: Not specified by the source
File: net/mac80211/rx.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality impact as none; integrity impact as low; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71130

Affected technology

linux kernel · from 5.16.1 (inclusive), before 6.1.160 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.4 (exclusive)
linux

linux kernel · 5.16
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 544460c33821b44c2f0c643121303c3dc3f66ef1 to before 25d69e07770745992387c016613fd7ac8eaf9893, 544460c33821b44c2f0c643121303c3dc3f66ef1 to before 0336188cc85d0eab8463bd1bbd4ded4e9602de8b, 544460c33821b44c2f0c643121303c3dc3f66ef1 to before 24d55ac8e31d2f8197bfad71ffcb3bae21ed7117, 544460c33821b44c2f0c643121303c3dc3f66ef1 to before 63f23aa2fbb823c8b15a29269fde220d227ce5b3, 544460c33821b44c2f0c643121303c3dc3f66ef1 to before 4fe2bd195435e71c117983d87f278112c5ab364c
Linux

Linux · 5.16
Linux

Component: Not specified by the source
Function: eb_lookup_vma, only
File: drivers/gpu/drm/i915/gem/i915_gem_execbuffer.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71131

Affected technology

linux kernel · from 2.6.25.1 (inclusive), before 5.10.248 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.4 (exclusive)
linux

linux kernel · 2.6.25
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 0a270321dbf948963aeb0e8382fe17d2c2eb3771 to before 18202537856e0fae079fed2c9308780bcff2bb9d, 0a270321dbf948963aeb0e8382fe17d2c2eb3771 to before baf0e2d1e03ddb04781dfe7f22a654d3611f69b2, 0a270321dbf948963aeb0e8382fe17d2c2eb3771 to before 50f196d2bbaee4ab2494bb1b0d294deba292951a, 0a270321dbf948963aeb0e8382fe17d2c2eb3771 to before 0279978adec6f1296af66b642cce641c6580be46, 0a270321dbf948963aeb0e8382fe17d2c2eb3771 to before ccbb96434d88e32358894c879457b33f7508e798, 0a270321dbf948963aeb0e8382fe17d2c2eb3771 to before 5476f7f8a311236604b78fcc5b2a63b3a61b0169, 0a270321dbf948963aeb0e8382fe17d2c2eb3771 to before 50fdb78b7c0bcc550910ef69c0984e751cac72fa
Linux

Linux · 2.6.25
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: crypto/seqiv.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71132

Affected technology

linux kernel · from 5.15.1 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.4 (exclusive)
linux

linux kernel · 5.15
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 342a93247e0837101f27bbcca26f402902df98dc to before 1c4cb705e733250d13243f6a69b8b5a92e39b9f6, 342a93247e0837101f27bbcca26f402902df98dc to before 9d222141b00156509d67d80c771fbefa92c43ace, 342a93247e0837101f27bbcca26f402902df98dc to before ef277ae121b3249c99994652210a326b52d527b0, 342a93247e0837101f27bbcca26f402902df98dc to before 36561b86cb2501647662cfaf91286dd6973804a6, 342a93247e0837101f27bbcca26f402902df98dc to before b6018d5c1a8f09d5efe4d6961d7ee45fdf3a7ce3, 342a93247e0837101f27bbcca26f402902df98dc to before 6402078bd9d1ed46e79465e1faaa42e3458f8a33
Linux

Linux · 5.15
Linux

Component: Not specified by the source
File: drivers/net/ethernet/smsc/smc91x.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71133

Affected technology

linux kernel · from 5.14.1 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.4 (exclusive)
linux

linux kernel · 5.14
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 915cc7ac0f8e2a23675ee896e87f17c7d3c47089 to before db93ae6fa66f1c61ae63400191195e3ee58021da, 915cc7ac0f8e2a23675ee896e87f17c7d3c47089 to before 305c02e541befe4a44ffde30ed374970f41aeb6c, 915cc7ac0f8e2a23675ee896e87f17c7d3c47089 to before fc23d05f0b3fb4d80657e7afebae2cae686b31c8, 915cc7ac0f8e2a23675ee896e87f17c7d3c47089 to before bf197c7c79ef6458d1ee84dd7db251b51784885f, 915cc7ac0f8e2a23675ee896e87f17c7d3c47089 to before d9b9affd103f51b42322da4ed5ac025b560bc354, 915cc7ac0f8e2a23675ee896e87f17c7d3c47089 to before 6f05611728e9d0ab024832a4f1abb74a5f5d0bb0
Linux

Linux · 5.14
Linux

Component: Not specified by the source
File: drivers/infiniband/hw/irdma/utils.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71135

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71136

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71137

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71138

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71140

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71141

Affected technology

linux kernel · from 6.5.12 (inclusive), before 6.6 (exclusive)
linux

linux kernel · from 6.6.2 (inclusive), before 6.6.120 (exclusive)
linux

linux kernel · from 6.7.1 (inclusive), before 6.18.4 (exclusive)
linux

linux kernel · 6.7
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 69f03be1fa08a66735d53d92d3429c052540e3bf to before 21e52dc7762908c3d499cfb493d1b8281fc1d3ab, 3c4babae3c4a1ae05f8f3f5f3d50c440ead7ca6a to before 28138ea7180c382b449ba9dce12fdec68880dea4, 3c4babae3c4a1ae05f8f3f5f3d50c440ead7ca6a to before 71be8825e83c90c1e020feb77b29e6a99629e642, 3c4babae3c4a1ae05f8f3f5f3d50c440ead7ca6a to before a585c7ef9cabda58088916baedc6573e9a5cd2a7, 84021fa4cf190e257ae8b66d284cdb92e3fabe33, 6.6.2 to before 6.6.120, 6.5.12 to before 6.6
Linux

Linux · 6.7
Linux

Component: Not specified by the source
File: drivers/gpu/drm/tilcdc/tilcdc_crtc.c, drivers/gpu/drm/tilcdc/tilcdc_drv.c, drivers/gpu/drm/tilcdc/tilcdc_drv.h

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71143

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71144

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71147

Affected technology

linux kernel · from 5.13 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.3 (exclusive)
linux

Linux · f2219745250f388edacabe6cca73654131c67d0a to before 3fd7df4636d8fd5e3592371967a5941204368936, f2219745250f388edacabe6cca73654131c67d0a to before af0689cafb127a8d1af78cc8b72585c9b2a19ecd, f2219745250f388edacabe6cca73654131c67d0a to before 19166de9737218b77122c41a5730ac87025e089f, f2219745250f388edacabe6cca73654131c67d0a to before 9b015f2918b95bdde2ca9cefa10ef02b138aae1e, f2219745250f388edacabe6cca73654131c67d0a to before 9e7c63c69f57b1db1a8a1542359a6167ff8fcef1, f2219745250f388edacabe6cca73654131c67d0a to before 62cd5d480b9762ce70d720a81fa5b373052ae05f
Linux

Linux · 5.13
Linux

Component: Not specified by the source
File: security/keys/trusted-keys/trusted_tpm2.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71148

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71150

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71151

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71153

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71154

Affected technology

linux kernel · from 3.10.1 (inclusive), before 5.10.248 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.4 (exclusive)
linux

linux kernel · 3.10
linux

linux kernel · 3.10 · update rc3
linux

linux kernel · 3.10 · update rc4
linux

linux kernel · 3.10 · update rc5
linux

linux kernel · 3.10 · update rc6
linux

linux kernel · 3.10 · update rc7
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

Linux · 4d12997a9bb3d217ad4b925ec3074ec89364bf95 to before a4e2442d3c48355a84463342f397134f149936d7, 4d12997a9bb3d217ad4b925ec3074ec89364bf95 to before 2f966186b99550e3c665dbfb87b8314e30acea02, 4d12997a9bb3d217ad4b925ec3074ec89364bf95 to before db2244c580540306d60ce783ed340190720cd429, 4d12997a9bb3d217ad4b925ec3074ec89364bf95 to before 4bd4ea3eb326608ffc296db12c105f92dc2f2190, 4d12997a9bb3d217ad4b925ec3074ec89364bf95 to before 6492ad6439ff1a479fc94dc6052df3628faed8b6, 4d12997a9bb3d217ad4b925ec3074ec89364bf95 to before 151403e903840c9cf06754097b6732c14f26c532, 4d12997a9bb3d217ad4b925ec3074ec89364bf95 to before 12cab1191d9890097171156d06bfa8d31f1e39c8
Linux

Linux · 3.10
Linux

Component: Not specified by the source
File: drivers/net/usb/rtl8150.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71160

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71162

Affected technology

linux kernel · from 4.7 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.67 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

Linux · f46b195799b5cb05338e7c44cb3617eacb56d755 to before 5f8d1d66a952d0396671e1f21ff8127a4d14fb4e, f46b195799b5cb05338e7c44cb3617eacb56d755 to before 76992310f80776b4d1f7f8915f59b92883a3e44c, f46b195799b5cb05338e7c44cb3617eacb56d755 to before ae3eed72de682ddbba507ed2d6b848c21a6b721e, f46b195799b5cb05338e7c44cb3617eacb56d755 to before 59cb421b0902fbef2b9512ae8ba198a20f26b41f, f46b195799b5cb05338e7c44cb3617eacb56d755 to before cb2c9c4bb1322cc3c9984ad17db8cdd2663879ca, f46b195799b5cb05338e7c44cb3617eacb56d755 to before be655c3736b3546f39bc8116ffbf2a3b6cac96c4, f46b195799b5cb05338e7c44cb3617eacb56d755 to before 2efd07a7c36949e6fa36a69183df24d368bf9e96
Linux

Linux · 4.7
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: drivers/dma/tegra210-adma.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71163

Affected technology

linux kernel · from 5.15 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.67 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

Linux · 6e7f3ee97bbe2c7d7a53b7dbd7a08a579e03c8c9 to before b7bd948f89271c92d9ca9b2b682bfba56896e959, 6e7f3ee97bbe2c7d7a53b7dbd7a08a579e03c8c9 to before b2d077180a56e3b7c97b7517d0465b584adc693b, 6e7f3ee97bbe2c7d7a53b7dbd7a08a579e03c8c9 to before c81ea0222eaaafdd77348e27d1e84a1b8cfc0c99, 6e7f3ee97bbe2c7d7a53b7dbd7a08a579e03c8c9 to before 0c97ff108f825a70c3bb29d65ddf0a013d231bb9, 6e7f3ee97bbe2c7d7a53b7dbd7a08a579e03c8c9 to before a7226fd61def74b60dd8e47ec84cabafc39d575b, 6e7f3ee97bbe2c7d7a53b7dbd7a08a579e03c8c9 to before 799900f01792cf8b525a44764f065f83fcafd468
Linux

Linux · 5.15
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: drivers/dma/idxd/compat.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71180

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71182

Affected technology

linux kernel · from 5.4.1 (inclusive), before 5.10.248 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.161 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.121 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.66 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.6 (exclusive)
linux

linux kernel · 5.4
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 9d71dd0c70099914fcd063135da3c580865e924c to before ebb0dfd718dd31c8d3600612ca4b7207ec3d923a, 9d71dd0c70099914fcd063135da3c580865e924c to before c3a4316e3c746af415c0fd6c6d489ad13f53714d, 9d71dd0c70099914fcd063135da3c580865e924c to before 46ca9dc978923c5e1247a9e9519240ba7ace413c, 9d71dd0c70099914fcd063135da3c580865e924c to before 78d87b72cebe2a993fd5b017e9f14fb6278f2eae, 9d71dd0c70099914fcd063135da3c580865e924c to before ba6f0d1832eeb5eb3a6dc5cb30e0f720b3cb3536, 9d71dd0c70099914fcd063135da3c580865e924c to before 79dd3f1d9dd310c2af89b09c71f34d93973b200f, 9d71dd0c70099914fcd063135da3c580865e924c to before 5d5602236f5db19e8b337a2cd87a90ace5ea776d
Linux

Linux · 5.4
Linux

Component: Not specified by the source
File: net/can/j1939/transport.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71183

Affected technology

linux kernel · from 3.18.32 (inclusive), before 3.19 (exclusive)
linux

linux kernel · from 4.1.23 (inclusive), before 4.2 (exclusive)
linux

linux kernel · from 4.4.8 (inclusive), before 4.5 (exclusive)
linux

linux kernel · from 4.5.2 (inclusive), before 4.6 (exclusive)
linux

linux kernel · from 4.6.1 (inclusive), before 6.1.161 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.121 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.66 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.6 (exclusive)
linux

linux kernel · 4.6
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 56f23fdbb600e6087db7b009775b95ce07cc3195 to before c7f0207db68d5a1b4af23acbef1a8e8ddc431ebb, 56f23fdbb600e6087db7b009775b95ce07cc3195 to before a63998cd6687c14b160dccb0bbcf281b2eb0dab3, 56f23fdbb600e6087db7b009775b95ce07cc3195 to before 0c2413c69129f6ce60157f7b53d9ba880260400b, 56f23fdbb600e6087db7b009775b95ce07cc3195 to before d52af58dd463821c5c516aebb031a58934f696ea, 56f23fdbb600e6087db7b009775b95ce07cc3195 to before 7ba0b6461bc4edb3005ea6e00cdae189bcf908a5, 048605483fbdd1e77ead32a7cd7b95cc17eaaf0e, 033ad030df0ea932a21499582fea59e1df95769b, 1653a3b0e9436c10eb307c318776cf91fe18ff08, ff440e9185e96cbb94481fc8b6192b944dcfc061, 3.18.32 to before 3.19, 4.1.23 to before 4.2, 4.4.8 to before 4.5, 4.5.2 to before 4.6
Linux

Linux · 4.6
Linux

Component: Not specified by the source
File: fs/btrfs/tree-log.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.1/10) rates confidentiality impact as none; integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71184

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71185

Affected technology

linux kernel · from 4.4.1 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.67 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux

linux kernel · 4.4
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 42dbdcc6bf965997c088caff2a8be7f9bf44f701 to before 1befa553f1ecc045dc9ff56107ff50162f63f3c0, 42dbdcc6bf965997c088caff2a8be7f9bf44f701 to before c933aa74d9f8d35e6cda322c38c4a907d37a9a2b, 42dbdcc6bf965997c088caff2a8be7f9bf44f701 to before 43725bd47d984937c429919ae291896d982d1f17, 42dbdcc6bf965997c088caff2a8be7f9bf44f701 to before 6fdf168f57e331e148a1177a9b590a845c21b315, 42dbdcc6bf965997c088caff2a8be7f9bf44f701 to before f810132e825588fbad3cba940458c58bb7ec4d84, 42dbdcc6bf965997c088caff2a8be7f9bf44f701 to before 30352277d8e09c972436f883a5efd1f1b763ac14, 42dbdcc6bf965997c088caff2a8be7f9bf44f701 to before 4fc17b1c6d2e04ad13fd6c21cfbac68043ec03f9
Linux

Linux · 4.4
Linux

RUGGEDCOM RST2428P · 0 to before V4.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: drivers/dma/ti/dma-crossbar.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71186

Affected technology

linux kernel · from 4.15.1 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.67 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux

linux kernel · 4.15
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · df7e762db5f6c8dbd9e480f1c9ef9851de346657 to before 3b42020e6790a5e19b36c187ed5b488a5716f97f, df7e762db5f6c8dbd9e480f1c9ef9851de346657 to before 6393da54dcb3488c080a183c4182ddec71ba8d7f, df7e762db5f6c8dbd9e480f1c9ef9851de346657 to before 1dda2a32303df0091896b01a9d09070d61fa344c, df7e762db5f6c8dbd9e480f1c9ef9851de346657 to before 1a179ac01ff3993ab97e33cc77c316ed7415cda1, df7e762db5f6c8dbd9e480f1c9ef9851de346657 to before 2fb10259d4efb4367787b5ae9c94192e8a91c648, df7e762db5f6c8dbd9e480f1c9ef9851de346657 to before 3ef52d31cce8ba816739085a61efe07b63c6cf27, df7e762db5f6c8dbd9e480f1c9ef9851de346657 to before dd6e4943889fb354efa3f700e42739da9bddb6ef
Linux

Linux · 4.15
Linux

RUGGEDCOM RST2428P · 0 to before V4.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: drivers/dma/stm32/stm32-dmamux.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71188

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71189

Affected technology

linux kernel · from 5.19.1 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.67 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux

linux kernel · 5.19
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 134d9c52fca26d2d199516e915da00f0cc6adc73 to before 6b87288581a0fcbe54b39da5c10e1aee2df8776e, 134d9c52fca26d2d199516e915da00f0cc6adc73 to before db7c79c1bbfb1b0184e78a17ac2bd0f2bc3134d1, 134d9c52fca26d2d199516e915da00f0cc6adc73 to before 8f7a391211381ed2f6802032c78c7820d166bc49, 134d9c52fca26d2d199516e915da00f0cc6adc73 to before eabe40f8a53c29f531e92778ea243e379f4f7978, 134d9c52fca26d2d199516e915da00f0cc6adc73 to before ec25e60f9f95464aa11411db31d0906b3fb7b9f2
Linux

Linux · 5.19
Linux

RUGGEDCOM RST2428P · 0 to before V4.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: drivers/dma/dw/rzn1-dmamux.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71190

Affected technology

linux kernel · from 4.13.1 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.67 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux

linux kernel · 4.13
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 743e1c8ffe4ee5dd7596556dcc3f022ccde13d7b to before 4316e4c4fd2c09f68a262365f21847cafa8fe9dd, 743e1c8ffe4ee5dd7596556dcc3f022ccde13d7b to before 4730f12a192d7314119b3d8331611ab151b87bdf, 743e1c8ffe4ee5dd7596556dcc3f022ccde13d7b to before bc98e68adfef3b25c06ff08f0808bb59f787420c, 743e1c8ffe4ee5dd7596556dcc3f022ccde13d7b to before c80ca7bdff158401440741bdcf9175bd8608580b, 743e1c8ffe4ee5dd7596556dcc3f022ccde13d7b to before db6f1d6d31711e73e6a214c73e6a8fb4cda0483d, 743e1c8ffe4ee5dd7596556dcc3f022ccde13d7b to before 2ed1a9de1f2d727ccae5bc9cc7c63ee3519c0c8b, 743e1c8ffe4ee5dd7596556dcc3f022ccde13d7b to before 7c3a46ebf15a9796b763a54272407fdbf945bed8
Linux

Linux · 4.13
Linux

RUGGEDCOM RST2428P · 0 to before V4.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: drivers/dma/bcm-sba-raid.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71191

Affected technology

linux kernel · from 3.10.1 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.67 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux

linux kernel · 3.10
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · bbe89c8e3d598129b728d1388c3ad9abe4e8e261 to before 49d964cde422dc66fea514b7ab24aa729df7081d, bbe89c8e3d598129b728d1388c3ad9abe4e8e261 to before 4c67b4f45c8540ee4e62e24ca4608c6a9a81ee0f, bbe89c8e3d598129b728d1388c3ad9abe4e8e261 to before 48b2d7f530b83cb149dbf0e48f95ccadb2d90da9, bbe89c8e3d598129b728d1388c3ad9abe4e8e261 to before 987c71671367f42460689b78244d7b894c50999a, bbe89c8e3d598129b728d1388c3ad9abe4e8e261 to before 6a86cf2c09e149d5718a5b7090545f7566da9334, bbe89c8e3d598129b728d1388c3ad9abe4e8e261 to before f3c23b7e941349505c3d40de2cc0acd93d9ac057, bbe89c8e3d598129b728d1388c3ad9abe4e8e261 to before b9074b2d7a230b6e28caa23165e9d8bc0677d333
Linux

Linux · 3.10
Linux

RUGGEDCOM RST2428P · 0 to before V4.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: drivers/dma/at_hdmac.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71192

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71193

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71194

Affected technology

Linux · 4a9d8bdee368de78ace8b36da4eb2186afea162d to before e563f59395981fcd69d130761290929806e728d6, 4a9d8bdee368de78ace8b36da4eb2186afea162d to before dc84036c173cff6a432d9ab926298850b1d2a659, 4a9d8bdee368de78ace8b36da4eb2186afea162d to before d7b04b40ac8e6d814e35202a0e1568809b818295, 4a9d8bdee368de78ace8b36da4eb2186afea162d to before 99da896614d17e8a84aeb2b2d464ac046cc8633d, 4a9d8bdee368de78ace8b36da4eb2186afea162d to before 8b0bb145d3bc264360f525c9717653be3522e528, 4a9d8bdee368de78ace8b36da4eb2186afea162d to before 9ac63333d600732a56b35ee1fa46836da671eb50, 4a9d8bdee368de78ace8b36da4eb2186afea162d to before 5037b342825df7094a4906d1e2a9674baab50cb2
Linux

Linux · 3.11
Linux

Component: Not specified by the source
File: fs/btrfs/transaction.c

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71195

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71196

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71197

Affected technology

Linux · e2c94d6f572079511945e64537eb1218643f2e68 to before 49ff9b4b9deacbefa6654a0a2bcaf910c9de7e95, e2c94d6f572079511945e64537eb1218643f2e68 to before 060b08d72a38b158a7f850d4b83c17c2969e0f6b, e2c94d6f572079511945e64537eb1218643f2e68 to before b3fc3e1f04dcc7c41787bbf08a6e0d2728e022cf, e2c94d6f572079511945e64537eb1218643f2e68 to before 6a5820ecfa5a76c3d3e154802c8c15f391ef442e, e2c94d6f572079511945e64537eb1218643f2e68 to before 6fd6d2a8e41b7f544a4d26cbd60bedf9c67893a0, e2c94d6f572079511945e64537eb1218643f2e68 to before e6b2609af21b5cccc9559339591b8a2cbf884169, e2c94d6f572079511945e64537eb1218643f2e68 to before 761fcf46a1bd797bd32d23f3ea0141ffd437668a
Linux

Linux · 5.8
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: drivers/w1/slaves/w1_therm.c

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71198

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71199

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71200

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71220

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71222

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71224

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71225

Affected technology

linux kernel · from 3.4.59 (inclusive), before 3.5 (exclusive)
linux

linux kernel · from 3.9.7 (inclusive), before 3.10 (exclusive)
linux

linux kernel · from 3.10.1 (inclusive), before 6.12.70 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.10 (exclusive)
linux

linux kernel · 3.10
linux

linux kernel · 3.10 · update rc6
linux

linux kernel · 3.10 · update rc7
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

Linux · e2d59925221cd562e07fee38ec8839f7209ae603 to before 863b9b7be824a6b2c0587532d3ece3022c6dd451, e2d59925221cd562e07fee38ec8839f7209ae603 to before 165d1359f945b72c5f90088f60d48ff46115269e, e2d59925221cd562e07fee38ec8839f7209ae603 to before 0107b18cd8ac17eb3e54786adc05a85cdbb6ef22, e2d59925221cd562e07fee38ec8839f7209ae603 to before 2cc583653bbe050bacd1cadcc9776d39bf449740, 1b9203bb4c658c0242afa6fdb025c71d2fc3ad76, 8ccf6cfb157419847f3cb2bfdfbcdbd39860e8e9, 3.4.59 to before 3.5, 3.9.7 to before 3.10
Linux

Linux · 3.10
Linux

Component: Not specified by the source
File: drivers/md/md.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.3/10) rates confidentiality impact as low; integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71268

Affected technology

linux kernel · from 4.4 (inclusive), before 6.1.163 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.124 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.70 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.10 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

Linux · 94ed938aba557aa798acf496f09afb289b619fcd to before f7156512c8166d385f574b9ec030479aa7b1e8c9, 94ed938aba557aa798acf496f09afb289b619fcd to before 28b97fcbbf523779688e8de5fe55bf2dae3859f6, 94ed938aba557aa798acf496f09afb289b619fcd to before f3ee1732851aec6fe6b2cec2ef1b32d4e71d9913, 94ed938aba557aa798acf496f09afb289b619fcd to before 28768bd3abf9995a93f6e01bfce01c60622964dd, 94ed938aba557aa798acf496f09afb289b619fcd to before c1c050f92d8f6aac4e17f7f2230160794fceef0c
Linux

Linux · 4.4
Linux

Component: Not specified by the source
File: fs/btrfs/inode.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-22976

Affected technology

linux kernel · from 3.0 (inclusive), before 5.10.248 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.161 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.121 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.66 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.6 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

Linux · 0545a3037773512d3448557ba048cebb73b3e4af to before 6116a83ec167d3ab1390cded854d237481f41b63, 0545a3037773512d3448557ba048cebb73b3e4af to before 0809c4bc06c9c961222df29f2eccfd449304056f, 0545a3037773512d3448557ba048cebb73b3e4af to before cdb24200b043438a144df501f1ebbd926bb1a2c7, 0545a3037773512d3448557ba048cebb73b3e4af to before 11bf9134613f6c71fc0ff36c5d8d33856f6ae3bb, 0545a3037773512d3448557ba048cebb73b3e4af to before 43497313d0da3e12b5cfcd97aa17bf48ee663f95, 0545a3037773512d3448557ba048cebb73b3e4af to before 51ffd447bc37bf1a5776b85523f51d2bc69977f6, 0545a3037773512d3448557ba048cebb73b3e4af to before c1d73b1480235731e35c81df70b08f4714a7d095
Linux

Linux · 3.0
Linux

RUGGEDCOM RST2428P · 0 to before V4.0
Siemens

Component: Not specified by the source
Function: tc_new_tfilter
File: net/sched/sch_qfq.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-22977

Affected technology

linux kernel · from 4.16 (inclusive), before 5.10.248 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.161 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.121 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.66 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.6 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

Linux · 6d07d1cd300f4c7e16005f881fea388164999cc8 to before 88dd6be7ebb3153b662c2cebcb06e032a92857f5, 6d07d1cd300f4c7e16005f881fea388164999cc8 to before c655d2167bf014d4c61b4faeca59b60ff9b9f6b1, 6d07d1cd300f4c7e16005f881fea388164999cc8 to before 8c6901aa29626e35045130bac09b75f791acca85, 6d07d1cd300f4c7e16005f881fea388164999cc8 to before 582a5e922a9652fcbb7d0165c95d5b20aa37575d, 6d07d1cd300f4c7e16005f881fea388164999cc8 to before 005671c60fcf1dbdb8bddf12a62568fd5e4ec391, 6d07d1cd300f4c7e16005f881fea388164999cc8 to before e00b169eaac5f7cdbf710c354c8fa76d02009115, 6d07d1cd300f4c7e16005f881fea388164999cc8 to before 2a71a1a8d0ed718b1c7a9ac61f07e5755c47ae20
Linux

Linux · 4.16
Linux

RUGGEDCOM RST2428P · 0 to before V4.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/core/sock.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-22978

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-22979

Affected technology

linux kernel · from 5.15.154 (inclusive), before 5.16 (exclusive)
linux

linux kernel · from 6.1.85 (inclusive), before 6.1.161 (exclusive)
linux

linux kernel · from 6.6.26 (inclusive), before 6.6.121 (exclusive)
linux

linux kernel · from 6.8.5 (inclusive), before 6.9 (exclusive)
linux

linux kernel · from 6.9.1 (inclusive), before 6.12.66 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.6 (exclusive)
linux

linux kernel · 6.9
linux

linux kernel · 6.9 · update rc3
linux

linux kernel · 6.9 · update rc4
linux

linux kernel · 6.9 · update rc5
linux

linux kernel · 6.9 · update rc6
linux

linux kernel · 6.9 · update rc7
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

Linux · 2eeab8c47c3c0276e0746bc382f405c9a236a5ad to before 0b27828ebd1ed3107d7929c3737adbe862e99e74, fc126c1d51e9552eacd2d717b9ffe9262a8a4cd6 to before 88bea149db2057112af3aaf63534b24fab5858ab, ed4cccef64c1d0d5b91e69f7a8a6697c3a865486 to before 3264881431e308b9c72cb8a0159d57a56d67dd79, ed4cccef64c1d0d5b91e69f7a8a6697c3a865486 to before c114a32a2e70b82d447f409f7ffcfa3058f9d5bd, ed4cccef64c1d0d5b91e69f7a8a6697c3a865486 to before 238e03d0466239410b72294b79494e43d4fabe77, d225b0ac96dc40d7e8ae2bc227eb2c56e130975f, 5b3b67f731296027cceb3efad881ae281213f86f, 6.1.85 to before 6.1.161, 6.6.26 to before 6.6.121, 5.15.154 to before 5.16, 6.8.5 to before 6.9
Linux

Linux · 6.9
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/core/skbuff.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-22980

Affected technology

linux kernel · from 3.18 (inclusive), before 5.10.248 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.161 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.121 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.66 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.6 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

Linux · 7f5ef2e900d9462bf9cffaf6bb246ed87a20a6d6 to before ca97360860eb02e3ae4ba42c19b439a0fcecbf06, 7f5ef2e900d9462bf9cffaf6bb246ed87a20a6d6 to before e8bfa2401d4c51eca6e48e9b33c798828ca9df61, 7f5ef2e900d9462bf9cffaf6bb246ed87a20a6d6 to before 34eb22836e0cdba093baac66599d68c4cd245a9d, 7f5ef2e900d9462bf9cffaf6bb246ed87a20a6d6 to before 06600719d0f7a723811c45e4d51f5b742f345309, 7f5ef2e900d9462bf9cffaf6bb246ed87a20a6d6 to before ba4811c8b433bfa681729ca42cc62b6034f223b0, 7f5ef2e900d9462bf9cffaf6bb246ed87a20a6d6 to before 53f07d095e7e680c5e4569a55a019f2c0348cdc6, 7f5ef2e900d9462bf9cffaf6bb246ed87a20a6d6 to before 2857bd59feb63fcf40fe4baf55401baea6b4feb4
Linux

Linux · 3.18
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: fs/nfsd/netns.h, fs/nfsd/nfs4state.c, fs/nfsd/nfsctl.c, fs/nfsd/state.h

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

A local attacker with low privileges could trigger a use-after-free error. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not state a further attacker outcome.

CVE-2026-22982

Affected technology

linux kernel · from 5.12 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.161 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.121 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.66 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.6 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

Linux · 528d3f190c98c8f7d9581f68db4af021696727b2 to before 8767f238b0e6c3d0b295ac6dce9fbe6a99bd1b9d, 528d3f190c98c8f7d9581f68db4af021696727b2 to before b17818307446c5a8d925a39a792261dbfa930041, 528d3f190c98c8f7d9581f68db4af021696727b2 to before 2985712dc76dfa670eb7fd607c09d4d48e5f5c6e, 528d3f190c98c8f7d9581f68db4af021696727b2 to before 03fb1708b7d1e76aecebf767ad059c319845039f, 528d3f190c98c8f7d9581f68db4af021696727b2 to before f490af47bbee02441e356a1e0b86e3b3dd5120ff, 528d3f190c98c8f7d9581f68db4af021696727b2 to before 34f3ff52cb9fa7dbf04f5c734fcc4cb6ed5d1a95
Linux

Linux · 5.12
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
Function: in
File: drivers/net/ethernet/mscc/ocelot.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-22984

Affected technology

linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.161 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.121 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.66 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.6 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

Linux · cd1a677cad994021b19665ed476aea63f5d54f31 to before 194cfe2af4d2a1de599d39dad636b47c2f6c2c96, cd1a677cad994021b19665ed476aea63f5d54f31 to before 79fe3511db416d2f2edcfd93569807cb02736e5e, cd1a677cad994021b19665ed476aea63f5d54f31 to before ef208ea331ef688729f64089b895ed1b49e842e3, cd1a677cad994021b19665ed476aea63f5d54f31 to before 2802ef3380fa8c4a08cda51ec1f085b1a712e9e2, cd1a677cad994021b19665ed476aea63f5d54f31 to before 2d653bb63d598ae4b096dd678744bdcc34ee89e8, cd1a677cad994021b19665ed476aea63f5d54f31 to before 818156caffbf55cb4d368f9c3cac64e458fb49c9
Linux

Linux · 5.11
Linux

Component: Not specified by the source
File: net/ceph/messenger_v2.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-22990

Affected technology

linux kernel · from 2.6.34.1 (inclusive), before 5.10.248 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.161 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.121 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.66 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.6 (exclusive)
linux

linux kernel · 2.6.34
linux

linux kernel · 2.6.34 · update rc2
linux

linux kernel · 2.6.34 · update rc3
linux

linux kernel · 2.6.34 · update rc4
linux

linux kernel · 2.6.34 · update rc5
linux

linux kernel · 2.6.34 · update rc6
linux

linux kernel · 2.6.34 · update rc7
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

Linux · f24e9980eb860d8600cbe5ef3d2fd9295320d229 to before 9aa0b0c14cefece078286d78b97d4c09685e372d, f24e9980eb860d8600cbe5ef3d2fd9295320d229 to before 4b106fbb1c7b841cd402abd83eb2447164c799ea, f24e9980eb860d8600cbe5ef3d2fd9295320d229 to before 6afd2a4213524bc742b709599a3663aeaf77193c, f24e9980eb860d8600cbe5ef3d2fd9295320d229 to before d3613770e2677683e65d062da5e31f48c409abe9, f24e9980eb860d8600cbe5ef3d2fd9295320d229 to before 6c6cec3db3b418c4fdf815731bc39e46dff75e1b, f24e9980eb860d8600cbe5ef3d2fd9295320d229 to before 6348d70af847b79805374fe628d3809a63fd7df3, f24e9980eb860d8600cbe5ef3d2fd9295320d229 to before e00c3f71b5cf75681dbd74ee3f982a99cb690c2b
Linux

Linux · 2.6.34
Linux

Component: Not specified by the source
File: net/ceph/osdmap.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-22991

Affected technology

linux kernel · from 4.13 (inclusive), before 5.10.248 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.161 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.121 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.66 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.6 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

Linux · 5cf9c4a9959b6273675310d14a834ef14fbca37c to before 9b3730dabcf3764bfe3ff07caf55e641a0b45234, 5cf9c4a9959b6273675310d14a834ef14fbca37c to before 851241d3f78a5505224dc21c03d8692f530256b4, 5cf9c4a9959b6273675310d14a834ef14fbca37c to before ec1850f663da64842614c86b20fe734be070c2ba, 5cf9c4a9959b6273675310d14a834ef14fbca37c to before 8081faaf089db5280c3be820948469f7c58ef8dd, 5cf9c4a9959b6273675310d14a834ef14fbca37c to before c4c2152a858c0ce4d2bff6ca8c1d5b0ef9f2cbdf, 5cf9c4a9959b6273675310d14a834ef14fbca37c to before f21c3fdb96833aac2f533506899fe38c19cf49d5, 5cf9c4a9959b6273675310d14a834ef14fbca37c to before e3fe30e57649c551757a02e1cad073c47e1e075e
Linux

Linux · 4.13
Linux

Component: Not specified by the source
File: net/ceph/osdmap.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-22992

Affected technology

linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.161 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.121 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.66 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.6 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

Linux · cd1a677cad994021b19665ed476aea63f5d54f31 to before 77229551f2cf72f3e35636db68e6a825b912cf16, cd1a677cad994021b19665ed476aea63f5d54f31 to before 33908769248b38a5e77cf9292817bb28e641992d, cd1a677cad994021b19665ed476aea63f5d54f31 to before e097cd858196b1914309e7e3d79b4fa79383754d, cd1a677cad994021b19665ed476aea63f5d54f31 to before d2c4a5f6996683f287f3851ef5412797042de7f1, cd1a677cad994021b19665ed476aea63f5d54f31 to before 9e0101e57534ef0e7578dd09608a6106736b82e5, cd1a677cad994021b19665ed476aea63f5d54f31 to before e84b48d31b5008932c0a0902982809fbaa1d3b70
Linux

Linux · 5.11
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/ceph/mon_client.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-22994

Affected technology

linux kernel · from 5.18 (inclusive), before 6.1.161 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.121 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.66 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.6 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

Linux · 1c194998252469cad00a08bd9ef0b99fd255c260 to before 368569bc546d3368ee9980ba79fc42fdff9a3365, 1c194998252469cad00a08bd9ef0b99fd255c260 to before 98676ee71fd4eafeb8be63c7f3f1905d40e03101, 1c194998252469cad00a08bd9ef0b99fd255c260 to before fb9ef40cccdbacce36029b305d0ef1e12e4fea38, 1c194998252469cad00a08bd9ef0b99fd255c260 to before 737be05a765761d7d7c9f7fe92274bd8e6f6951e, 1c194998252469cad00a08bd9ef0b99fd255c260 to before ec69daabe45256f98ac86c651b8ad1b2574489a7
Linux

Linux · 5.18
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/bpf/test_run.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-22996

Affected technology

linux kernel · from 5.12 (inclusive), before 6.12.67 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

Linux · c4d7eb57687f358cd498ea3624519236af8db97e to before 7b3b902320214835013ce625053b0743a71c804c, c4d7eb57687f358cd498ea3624519236af8db97e to before dcb2ad755a16cb0ecd2dc98234d71a6e216ae7fe, c4d7eb57687f358cd498ea3624519236af8db97e to before a3d4f87d41f5140f1cf5c02fce5cdad2637f6244, c4d7eb57687f358cd498ea3624519236af8db97e to before 123eda2e5b1638e298e3a66bb1e64a8da92de5e1
Linux

Linux · 5.12
Linux

Component: Not specified by the source
File: drivers/net/ethernet/mellanox/mlx5/core/en.h, drivers/net/ethernet/mellanox/mlx5/core/en_main.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-22997

Affected technology

linux kernel · from 5.4 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.67 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

Linux · 9d71dd0c70099914fcd063135da3c580865e924c to before a73e7d7e346dae1c22dc3e95b02ca464b12daf2c, 9d71dd0c70099914fcd063135da3c580865e924c to before adabf01c19561e42899da9de56a6a1da0e6b8a5b, 9d71dd0c70099914fcd063135da3c580865e924c to before b1d67607e97d489c0cfbbf55f48a76b00710b0e4, 9d71dd0c70099914fcd063135da3c580865e924c to before 809a437e27a3bf3c1c6c8c157773635552116f2b, 9d71dd0c70099914fcd063135da3c580865e924c to before cb2a610867bc379988bae0bb4b8bbc59c0decf1a, 9d71dd0c70099914fcd063135da3c580865e924c to before 6121b7564c725b632ffe4764abe85aa239d37703, 9d71dd0c70099914fcd063135da3c580865e924c to before 1809c82aa073a11b7d335ae932d81ce51a588a4a
Linux

Linux · 5.4
Linux

Component: Not specified by the source
File: net/can/j1939/transport.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-22998

Affected technology

linux kernel · from 5.4.268 (inclusive), before 5.5 (exclusive)
linux

linux kernel · from 5.10.209 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.15.148 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 6.1.75 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.6.14 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7.2 (inclusive), before 6.12.67 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

Linux · f775f2621c2ac5cc3a0b3a64665dad4fb146e510 to before baabe43a0edefac8cd7b981ff87f967f6034dafe, 4cb3cf7177ae3666be7fb27d4ad4d72a295fb02d to before 76abc83a9d25593c2b7613c549413079c14a4686, 2871aa407007f6f531fae181ad252486e022df42 to before 7d75570002929d20e40110d6b03e46202c9d1bc7, 24e05760186dc070d3db190ca61efdbce23afc88 to before fdecd3b6aac10d5a18d0dc500fe57f8648b66cd4, efa56305908ba20de2104f1b8508c6a7401833be to before 3def5243150716be86599c2a1767c29c68838b6d, efa56305908ba20de2104f1b8508c6a7401833be to before 374b095e265fa27465f34780e0eb162ff1bef913, efa56305908ba20de2104f1b8508c6a7401833be to before 32b63acd78f577b332d976aa06b56e70d054cbba, ee5e7632e981673f42a50ade25e71e612e543d9d, 70154e8d015c9b4fb56c1a2ef1fc8b83d45c7f68, 5.10.209 to before 5.10.249, 5.15.148 to before 5.15.199, 6.1.75 to before 6.1.162, 6.6.14 to before 6.6.122, 5.4.268 to before 5.5, 6.7.2 to before 6.8
Linux

Linux · 6.8
Linux

Component: Not specified by the source
Function: dereferences
File: drivers/nvme/target/tcp.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-22999

Affected technology

linux kernel · from 3.8 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.67 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

Linux · 462dbc9101acd38e92eda93c0726857517a24bbd to before 2a64fb9b47afffeb5dbab5fd3a518e1436dcc90e, 462dbc9101acd38e92eda93c0726857517a24bbd to before cff6cd703f41d8071995956142729e4bba160363, 462dbc9101acd38e92eda93c0726857517a24bbd to before f06f7635499bc806cbe2bbc8805c7cef8b1edddf, 462dbc9101acd38e92eda93c0726857517a24bbd to before 0a234660dc70ce45d771cbc76b20d925b73ec160, 462dbc9101acd38e92eda93c0726857517a24bbd to before 362e269bb03f7076ba9990e518aeddb898232e50, 462dbc9101acd38e92eda93c0726857517a24bbd to before e9d8f11652fa08c647bf7bba7dd8163241a332cd, 462dbc9101acd38e92eda93c0726857517a24bbd to before 3879cffd9d07aa0377c4b8835c4f64b4fb24ac78
Linux

Linux · 3.8
Linux

Component: Not specified by the source
File: net/sched/sch_qfq.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23000

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23001

Affected technology

linux kernel · from 3.18.1 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.67 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux

linux kernel · 3.18
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 79cf79abce71eb7dbc40e2f3121048ca5405cb47 to before 8133e85b8a3ec9f10d861e0002ec6037256e987e, 79cf79abce71eb7dbc40e2f3121048ca5405cb47 to before 484919832e2db6ce1e8add92c469e5d459a516b5, 79cf79abce71eb7dbc40e2f3121048ca5405cb47 to before 232afc74a6dde0fe1830988e5827921f5ec9bb3f, 79cf79abce71eb7dbc40e2f3121048ca5405cb47 to before 15f6faf36e162532bec5cc05eb3fc622108bf2ed, 79cf79abce71eb7dbc40e2f3121048ca5405cb47 to before 8518712a2ca952d6da2238c6f0a16b4ae5ea3f13, 79cf79abce71eb7dbc40e2f3121048ca5405cb47 to before 6dbead9c7677186f22b7981dd085a0feec1f038e, 79cf79abce71eb7dbc40e2f3121048ca5405cb47 to before 7470a7a63dc162f07c26dbf960e41ee1e248d80e
Linux

Linux · 3.18
Linux

Component: Not specified by the source
File: drivers/net/macvlan.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23003

Affected technology

linux kernel · from 5.10.210 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.15.149 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 6.1.77 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.6.16 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7.4 (inclusive), before 6.8 (exclusive)
linux

linux kernel · from 6.8.1 (inclusive), before 6.12.67 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux

linux kernel · 6.8
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · a9bc32879a08f23cdb80a48c738017e39aea1080 to before f9c5c5b791d3850570796f9e067629474e613796, af6b5c50d47ab43e5272ad61935d0ed2e264d3f0 to before 64c71d60a21a9ed0a802483dcd422b5b24eb1abe, d54e4da98bbfa8c257bdca94c49652d81d18a4d8 to before 9e1c8c2a33d0a7b1f637b5d0602fe56ed10166af, 350a6640fac4b53564ec20aa3f4a0922cb0ba5e6 to before 2f03dafea0a8096a2eb60f551218b360e5bab9a3, 8d975c15c0cd744000ca386247432d57b21f9df0 to before df5ffde9669314500809bc498ae73d6d3d9519ac, 8d975c15c0cd744000ca386247432d57b21f9df0 to before b9f915340f25cae1562f18e1eb52deafca328414, 8d975c15c0cd744000ca386247432d57b21f9df0 to before 81c734dae203757fb3c9eee6f9896386940776bd, c835df3bcc14858ae9b27315dd7de76370b94f3a, 5.10.210 to before 5.10.249, 5.15.149 to before 5.15.199, 6.1.77 to before 6.1.162, 6.6.16 to before 6.6.122, 6.7.4 to before 6.8
Linux

Linux · 6.8
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/ipv6/ip6_tunnel.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23005

Affected technology

linux kernel · from 5.17.1 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.67 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux

linux kernel · 5.17
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 820a6ee944e74e57255ac2e90916ecdaade57b95 to before b5995c01ba53d84182ecb9492fc4d91cfe8a362d, 820a6ee944e74e57255ac2e90916ecdaade57b95 to before 1e2848bda819af569dfe7ab186223855e092a2cb, 820a6ee944e74e57255ac2e90916ecdaade57b95 to before f577508cc8a0adb8b4ebe9480bba7683b6149930, 820a6ee944e74e57255ac2e90916ecdaade57b95 to before eea6f395ca502c4528314c8112da9b5d65f685eb, 820a6ee944e74e57255ac2e90916ecdaade57b95 to before b45f721775947a84996deb5c661602254ce25ce6
Linux

Linux · 5.17
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: arch/x86/kernel/fpu/core.c, arch/x86/kvm/x86.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23006

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23010

Affected technology

linux kernel · from 6.1.120 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.6.64 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.11.11 (inclusive), before 6.12 (exclusive)
linux

linux kernel · from 6.12.2 (inclusive), before 6.12.67 (exclusive)
linux

linux kernel · from 6.13.1 (inclusive), before 6.18.7 (exclusive)
linux

linux kernel · 6.13
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · ca97dd10424860a3806ad3a9e26b9dce2901ee0c to before 6e89d60b4f03014f7d412ce64b17a840840d490e, 836deb96383ed9c1a411f172954d74b3f74ec6ac to before 9356b69d03d0f50cce91cebdabd33dda023fbd64, cb74207ef98317f8874a0b9780bb339c2eb700b0 to before 2684610a9c9c53f262fd864fa5c407e79f304804, 00b5b7aab9e422d00d5a9d03d7e0760a76b5d57f to before 8b6dcb565e419846bd521e31d5e1f98e4d0e1179, 00b5b7aab9e422d00d5a9d03d7e0760a76b5d57f to before ddf96c393a33aef4887e2e406c76c2f8cda1419c, 851b3bb105c595cc20b8dcc1b4de029061ce2b76, 6.1.120 to before 6.1.162, 6.6.64 to before 6.6.122, 6.12.2 to before 6.12.67, 6.11.11 to before 6.12
Linux

Linux · 6.13
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/ipv6/addrconf.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23011

Affected technology

linux kernel · from 3.10.1 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.67 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux

linux kernel · 3.10
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · c54419321455631079c7d6e60bc732dd0c5914c5 to before eeb9a521de40c6fadccc12fa5205e5a1b364d5a8, c54419321455631079c7d6e60bc732dd0c5914c5 to before 8d5b6b2d79c1c22a5b0db1187a6439dff375a022, c54419321455631079c7d6e60bc732dd0c5914c5 to before 2ecf0aa7cc262472a9599cc51ba02ada0897a17a, c54419321455631079c7d6e60bc732dd0c5914c5 to before 06fe0801396a36cab865b34f666de1d65bc5ce8e, c54419321455631079c7d6e60bc732dd0c5914c5 to before aa57bfea4674e6da8104fa3a37760a6f5f255dad, c54419321455631079c7d6e60bc732dd0c5914c5 to before 554201ed0a8f4d32e719f42caeaeb2735a9ed6ca, c54419321455631079c7d6e60bc732dd0c5914c5 to before e67c577d89894811ce4dcd1a9ed29d8b63476667
Linux

Linux · 3.10
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/ipv4/ip_gre.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23019

Affected technology

linux kernel · from 5.10.1 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.161 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.121 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.66 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.6 (exclusive)
linux

linux kernel · 5.10
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 34dd1710f5a3c9a7dc78e1ff6de69a19d407db25 to before 8a4333b2818f0d853b43e139936c20659366e4a0, 34dd1710f5a3c9a7dc78e1ff6de69a19d407db25 to before 325aea74be7e192b5c947c782da23b0d19a5fda2, 34dd1710f5a3c9a7dc78e1ff6de69a19d407db25 to before 94e070cd50790317fba7787ae6006934b7edcb6f, 34dd1710f5a3c9a7dc78e1ff6de69a19d407db25 to before 3950054c9512add0cc79ab7e72b6d2f9f675e25b, 34dd1710f5a3c9a7dc78e1ff6de69a19d407db25 to before 326a4b7e61d01db3507f71c8bb5e85362f607064, 34dd1710f5a3c9a7dc78e1ff6de69a19d407db25 to before a428e0da1248c353557970848994f35fd3f005e2
Linux

Linux · 5.10
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: drivers/net/ethernet/marvell/prestera/prestera_devlink.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23020

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23021

Affected technology

linux kernel · from 3.10.1 (inclusive), before 5.10.248 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.161 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.121 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.66 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.6 (exclusive)
linux

linux kernel · 3.10
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 323b34963d113efb566635f43858f40cce01d5f9 to before 5397ea6d21c35a17707e201a60761bdee00bcc4e, 323b34963d113efb566635f43858f40cce01d5f9 to before a40af9a2904a1ab8ce61866ebe2a894ef30754ba, 323b34963d113efb566635f43858f40cce01d5f9 to before ac5d92d2826dec51e5d4c6854865bc5817277452, 323b34963d113efb566635f43858f40cce01d5f9 to before 93f18eaa190374e0f2d253e3b1a65cee19a7abe6, 323b34963d113efb566635f43858f40cce01d5f9 to before 471dfb97599eec74e0476046b3ef8e7037f27b34, 323b34963d113efb566635f43858f40cce01d5f9 to before ce6eef731aba23a988decea1df3b08cf978f7b01, 323b34963d113efb566635f43858f40cce01d5f9 to before afa27621a28af317523e0836dad430bec551eb54
Linux

Linux · 3.10
Linux

Component: Not specified by the source
File: drivers/net/usb/pegasus.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23025

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23026

Affected technology

linux kernel · from 5.11.1 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.67 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux

linux kernel · 5.11
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 5d0c3533a19f48e5e7e73806a3e4b29cd4364130 to before 4532f18e4ab36def1f55cd936d0fc002b2ce34c2, 5d0c3533a19f48e5e7e73806a3e4b29cd4364130 to before 694ab1f6f16cb69f7c5ef2452b22ba7b00a3c7c7, 5d0c3533a19f48e5e7e73806a3e4b29cd4364130 to before 6bf4ef078fd11910988889a6c0b3698d2e0c89af, 5d0c3533a19f48e5e7e73806a3e4b29cd4364130 to before 01b1d781394fc9b83015e3a3cd46b17bda842bd8, 5d0c3533a19f48e5e7e73806a3e4b29cd4364130 to before 55a67ba5ac4cebfd54cc8305d4d57a0f1dfe6a85, 5d0c3533a19f48e5e7e73806a3e4b29cd4364130 to before 3f747004bbd641131d9396d87b5d2d3d1e182728
Linux

Linux · 5.11
Linux

RUGGEDCOM RST2428P · 0 to before V4.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
Function: directly
File: drivers/dma/qcom/gpi.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23030

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23031

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23032

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23033

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23035

Affected technology

Linux · c4d7eb57687f358cd498ea3624519236af8db97e to before 444b0e44aa43081d4ddd138575e5a2dcabf439c7, c4d7eb57687f358cd498ea3624519236af8db97e to before a7625bacaa8c8c2bfcde6dd6d1397bd63ad82b02, c4d7eb57687f358cd498ea3624519236af8db97e to before 66a25f6b7c0bfd84e6d27b536f5d24116dbd52da, c4d7eb57687f358cd498ea3624519236af8db97e to before 4ef8512e1427111f7ba92b4a847d181ff0aeec42
Linux

Linux · 5.12
Linux

Component: Not specified by the source
File: drivers/net/ethernet/mellanox/mlx5/core/en.h, drivers/net/ethernet/mellanox/mlx5/core/en_main.c, drivers/net/ethernet/mellanox/mlx5/core/en_rep.c

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23037

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23038

Affected technology

Linux · d67ae825a59d639e4d8b82413af84d854617a87e to before e2dde5dafb80f1af4028ed10ad255f42af71c784, d67ae825a59d639e4d8b82413af84d854617a87e to before 27c90d8ed81e7a289c9fe41b5e31d8bb609a3385, d67ae825a59d639e4d8b82413af84d854617a87e to before 34b9dd179818ff7af2b36410985fd8166573c62d, d67ae825a59d639e4d8b82413af84d854617a87e to before 869862056e100973e76ce9f5f1b01837771b7722, d67ae825a59d639e4d8b82413af84d854617a87e to before 86da7efd12295a7e2b4abde5e5984c821edd938f, d67ae825a59d639e4d8b82413af84d854617a87e to before ed5d3f2f6885eb99f729e6ffd946e3aa058bd3eb, d67ae825a59d639e4d8b82413af84d854617a87e to before 0c728083654f0066f5e10a1d2b0bd0907af19a58
Linux

Linux · 4.0
Linux

RUGGEDCOM RST2428P · 0 to before V4.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
Function: jumps
File: fs/nfs/flexfilelayout/flexfilelayoutdev.c

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23047

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23049

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23050

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23053

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source