CVE-2025-21718: linux kernel from 2.6.12 (inclusive), before 6.1.129 (exclusive), from 6.2 (inclusive), before 6.6.76 (exclusive)…

Affected technology

linux kernel · from 2.6.12 (inclusive), before 6.1.129 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.76 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.13 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.13.2 (exclusive)
linux

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 52f5aff33ca73b2c2fa93f40a3de308012e63cf4, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 0d5bca3be27bfcf8f980f2fed49b6cbb7dafe4a1, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1409b45d4690308c502c6caf22f01c3c205b4717, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f55c88e3ca5939a6a8a329024aed8f3d98eea8e4, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 51c128ba038cf1b79d605cbee325919b45ab95a5, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1992fb261c90e9827cf5dc3115d89bb0853252c9, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 58051a284ac18a3bb815aac6289a679903ddcc3f, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 5de7665e0a0746b5ad7943554b34db8f8614a196
Linux

Linux · 2.6.12
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/rose/rose_timer.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.