CVE-2025-21760: linux kernel from 2.6.26 (inclusive), before 5.4.291 (exclusive), from 5.5 (inclusive), before 5.10.235 (exclusive)…

Affected technology

linux kernel · from 2.6.26 (inclusive), before 5.4.291 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.235 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.179 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.129 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.79 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.16 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.13.4 (exclusive)
linux

linux kernel · 6.14 · update rc1
linux

linux kernel · 6.14 · update rc2
linux

Linux · 1762f7e88eb34f653b4a915be99a102e347dd45e to before 10a1f3fece2f0d23a3a618b72b2b4e6f408ef7d1, 1762f7e88eb34f653b4a915be99a102e347dd45e to before 4d576202b90b1b95a7c428a80b536f91b8201bcc, 1762f7e88eb34f653b4a915be99a102e347dd45e to before e24d225e4cb8cf108bde00b76594499b98f0a74d, 1762f7e88eb34f653b4a915be99a102e347dd45e to before a9319d800b5701e7f5e3fa71a5b7c4831fc20d6d, 1762f7e88eb34f653b4a915be99a102e347dd45e to before ae38982f521621c216fc2f5182cd091f4734641d, 1762f7e88eb34f653b4a915be99a102e347dd45e to before 789230e5a8c1097301afc802e242c79bc8835c67, 1762f7e88eb34f653b4a915be99a102e347dd45e to before 04e05112f10354ffc3bb6cc796d553bab161594c, 1762f7e88eb34f653b4a915be99a102e347dd45e to before ed6ae1f325d3c43966ec1b62ac1459e2b8e45640
Linux

Linux · 2.6.26
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/ipv6/ndisc.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.1/10) rates confidentiality, integrity and availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.