CVE-2025-21719: linux kernel from 4.20 (inclusive), before 5.4.291 (exclusive), from 5.5 (inclusive), before 5.10.235 (exclusive)…

Affected technology

linux kernel · from 4.20 (inclusive), before 5.4.291 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.235 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.179 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.129 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.76 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.13 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.13.2 (exclusive)
linux

Linux · cb167893f41e21e6bd283d78e53489289dc0592d to before 71a0fcb68c0a5f3ec912b540cd5d72148e6ee5f1, cb167893f41e21e6bd283d78e53489289dc0592d to before 53df27fd38f84bd3cd6b004eb4ff3c4903114f1d, cb167893f41e21e6bd283d78e53489289dc0592d to before 547ef7e8cbb98f966c8719a3e15d4e078aaa9b47, cb167893f41e21e6bd283d78e53489289dc0592d to before 57177c5f47a8da852f8d76cf6945cf803f8bb9e5, cb167893f41e21e6bd283d78e53489289dc0592d to before b379b3162ff55a70464c6a934ae9bf0497478a62, cb167893f41e21e6bd283d78e53489289dc0592d to before a099834a51ccf9bbba3de86a251b3433539abfde, cb167893f41e21e6bd283d78e53489289dc0592d to before 26bb7d991f04eeef47dfad23e533834995c26f7a, cb167893f41e21e6bd283d78e53489289dc0592d to before 15a901361ec3fb1c393f91880e1cbf24ec0a88bd
Linux

Linux · 4.20
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
File: net/ipv4/ipmr_base.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.