CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2025-21692: linux kernel 6.13; +5 more affected products

CVE-2025-21692. CVSS 3.1 base score 7.8 (HIGH, NVD). EPSS 0.00618 (percentile 0.48217), scored 13-Oct-2026.

Affected technology

linux kernel · from 5.6 (inclusive), before 5.10.234 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.178 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.128 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.75 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.12 (exclusive)
linux

linux kernel · 6.13
linux

linux kernel · 6.13 · update rc1
linux

linux kernel · 6.13 · update rc2
linux

linux kernel · 6.13 · update rc3
linux

linux kernel · 6.13 · update rc4
linux

linux kernel · 6.13 · update rc5
linux

linux kernel · 6.13 · update rc6
linux

linux kernel · 6.13 · update rc7
linux

Linux · dcc68b4d8084e1ac9af0d4022d6b1aff6a139a33 to before 03c56665dab1f4ac844bc156652d50d639093fa5, dcc68b4d8084e1ac9af0d4022d6b1aff6a139a33 to before bcf0d815e728a3a304b50455b32a3170c16e1eaa, dcc68b4d8084e1ac9af0d4022d6b1aff6a139a33 to before 1332c6ed446be787f901ed1064ec6a3c694f028a, dcc68b4d8084e1ac9af0d4022d6b1aff6a139a33 to before f4168299e553f17aa2ba4016e77a9c38da40eb1d, dcc68b4d8084e1ac9af0d4022d6b1aff6a139a33 to before 997f6ec4208b23c87daf9f044689685f091826f7, dcc68b4d8084e1ac9af0d4022d6b1aff6a139a33 to before f6b0f05fbfa4044f890e8a348288c0d9a20bd1d0, dcc68b4d8084e1ac9af0d4022d6b1aff6a139a33 to before d62b04fca4340a0d468d7853bd66e511935a18cb
Linux

Linux · 5.6
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: net/sched/sch_ets.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

The source reports that an attacker could gain higher privileges under the conditions described by the source. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high.

Published

CWE
CWE-129
CCR priority
31.4 /100 (P4)
CVSS 3.1
7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · NVD
EPSS
0.00618 · percentile 0.4839 · 2026-10-14
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2025-21692.html