Get real-time updates on Telegram
CVE-2025-21692: linux kernel 6.13; +5 more affected products
CVE-2025-21692. CVSS 3.1 base score 7.8 (HIGH, NVD). EPSS 0.00618 (percentile 0.48217), scored 13-Oct-2026.
Affected technology
linux kernel · from 5.6 (inclusive), before 5.10.234 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.178 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.128 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.75 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.12 (exclusive)
linux
linux kernel · 6.13
linux
linux kernel · 6.13 · update rc1
linux
linux kernel · 6.13 · update rc2
linux
linux kernel · 6.13 · update rc3
linux
linux kernel · 6.13 · update rc4
linux
linux kernel · 6.13 · update rc5
linux
linux kernel · 6.13 · update rc6
linux
linux kernel · 6.13 · update rc7
linux
Linux · dcc68b4d8084e1ac9af0d4022d6b1aff6a139a33 to before 03c56665dab1f4ac844bc156652d50d639093fa5, dcc68b4d8084e1ac9af0d4022d6b1aff6a139a33 to before bcf0d815e728a3a304b50455b32a3170c16e1eaa, dcc68b4d8084e1ac9af0d4022d6b1aff6a139a33 to before 1332c6ed446be787f901ed1064ec6a3c694f028a, dcc68b4d8084e1ac9af0d4022d6b1aff6a139a33 to before f4168299e553f17aa2ba4016e77a9c38da40eb1d, dcc68b4d8084e1ac9af0d4022d6b1aff6a139a33 to before 997f6ec4208b23c87daf9f044689685f091826f7, dcc68b4d8084e1ac9af0d4022d6b1aff6a139a33 to before f6b0f05fbfa4044f890e8a348288c0d9a20bd1d0, dcc68b4d8084e1ac9af0d4022d6b1aff6a139a33 to before d62b04fca4340a0d468d7853bd66e511935a18cb
Linux
Linux · 5.6
Linux
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens
RUGGEDCOM RST2428P · 0 to before V3.2
Siemens
SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens
SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens
Component: Not specified by the source
File: net/sched/sch_ets.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
The source reports that an attacker could gain higher privileges under the conditions described by the source. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high.
- CWE
- CWE-129
- CCR priority
- 31.4 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · NVD
- EPSS
- 0.00618 · percentile 0.4839 · 2026-10-14
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-21692.html