Get real-time updates on Telegram
CVE-2025-21708: linux kernel 2.6.12; +2 more affected products
CVE-2025-21708. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00227 (percentile 0.12474), scored 14-Oct-2026.
Affected technology
linux kernel · from 2.6.13 (inclusive), before 5.4.291 (exclusive)
linux
linux kernel · from 5.5 (inclusive), before 5.10.235 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.179 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.129 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.76 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.13 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.13.2 (exclusive)
linux
linux kernel · 2.6.12
linux
linux kernel · 2.6.12 · update rc2
linux
linux kernel · 2.6.12 · update rc3
linux
linux kernel · 2.6.12 · update rc4
linux
linux kernel · 2.6.12 · update rc5
linux
Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 431be4f78220d34ce21d67a6b843b7ca81bd82e9, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8f78a2b9ed4cb1e62c60d0a8905d9a37bc18c20d, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d42168f109f96b5d18812a789086015a435ee667, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before e10b392a7495a5dbbb25247e2c17d380d9899263, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 3c706829ceb6e347bd4ddfd17f1d3048acd69da2, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f395b7efcee8df54309eb2d4a624ef13f5d88b66, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c843515ad2be7349dd6b60e5fd299d0da0b8458b, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 90b7f2961798793275b4844348619b622f983907
Linux
Linux · 2.6.12
Linux
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens
Component: Not specified by the source
File: drivers/net/usb/rtl8150.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 22.1 /100 (P4)
- CVSS 3.1
- 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
- EPSS
- 0.00227 · percentile 0.12474 · 2026-10-14
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-21708.html