CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2025-21704: linux kernel 2.6.12; +2 more affected products

CVE-2025-21704. CVSS 3.1 base score 7.8 (HIGH, NVD). EPSS 0.00355 (percentile 0.2749), scored 14-Oct-2026.

Affected technology

linux kernel · from 2.6.13 (inclusive), before 5.4.291 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.235 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.179 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.129 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.79 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.16 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.13.4 (exclusive)
linux

linux kernel · 2.6.12
linux

linux kernel · 2.6.12 · update rc2
linux

linux kernel · 2.6.12 · update rc3
linux

linux kernel · 2.6.12 · update rc4
linux

linux kernel · 2.6.12 · update rc5
linux

linux kernel · 6.14 · update rc1
linux

linux kernel · 6.14 · update rc2
linux

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a4e1ae5c0533964170197e4fb4f33bc8c1db5cd2, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 90dd2f1b7342b9a671a5ea4160f408037b92b118, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 871619c2b78fdfe05afb4e8ba548678687beb812, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7828e9363ac4d23b02419bf2a45b9f1d9fb35646, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6abb510251e75f875797d8983a830e6731fa281c, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f64079bef6a8a7823358c3f352ea29a617844636, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 383d516a0ebc8641372b521c8cb717f0f1834831, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before e563b01208f4d1f609bcab13333b6c0e24ce6a01
Linux

Linux · 2.6.12
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
File: drivers/usb/class/cdc-acm.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-787
CCR priority
31.3 /100 (P4)
CVSS 3.1
7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · NVD
EPSS
0.00355 · percentile 0.2749 · 2026-10-14
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2025-21704.html