P4Verified

CVE-2025-21731: linux kernel from 4.12 (inclusive), before 5.4.291 (exclusive), from 5.5 (inclusive), before 5.10.235 (exclusive)…

CVE-2025-21731. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00231 (percentile 0.12905), scored 14-Oct-2026.

Affected technology

linux kernel · from 4.12 (inclusive), before 5.4.291 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.235 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.179 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.129 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.76 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.13 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.13.2 (exclusive)
linux

Linux · b7aa3d39385dc2d95899f9e379623fef446a2acd to before e70a578487a47d7cf058904141e586684d1c3381, b7aa3d39385dc2d95899f9e379623fef446a2acd to before 6bef6222a3f6c7adb6396f77f25a3579d821b09a, b7aa3d39385dc2d95899f9e379623fef446a2acd to before e3be8862d73cac833e0fb7602636c19c6cb94b11, b7aa3d39385dc2d95899f9e379623fef446a2acd to before e7343fa33751cb07c1c56b666bf37cfca357130e, b7aa3d39385dc2d95899f9e379623fef446a2acd to before d208d2c52b652913b5eefc8ca434b0d6b757f68f, b7aa3d39385dc2d95899f9e379623fef446a2acd to before a8ee6ecde2b7bfb58c8a3afe8a9d2b848f580739, b7aa3d39385dc2d95899f9e379623fef446a2acd to before 9793bd5ae4bdbdb2dde401a3cab94a6bfd05e302, b7aa3d39385dc2d95899f9e379623fef446a2acd to before 844b8cdc681612ff24df62cdefddeab5772fadf1
Linux

Linux · 4.12
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: drivers/block/nbd.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 15-Oct-2026 09:20 UTC

CWE: CWE-416
CCR priority: 31.3 /100 (P4)
CVSS 3.1: 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS: 0.00231 · percentile 0.12905 · 2026-10-14
KEV: no

Provenance

FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2025-21731.html