CVE-2025-21766: linux kernel 5.9; +5 more affected products

Affected technology

linux kernel · from 4.14.200 (inclusive), before 4.15 (exclusive)
linux

linux kernel · from 4.19.148 (inclusive), before 4.20 (exclusive)
linux

linux kernel · from 5.4.68 (inclusive), before 5.5 (exclusive)
linux

linux kernel · from 5.8.12 (inclusive), before 5.9 (exclusive)
linux

linux kernel · from 5.9.1 (inclusive), before 5.15.179 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.129 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.79 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.16 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.13.4 (exclusive)
linux

linux kernel · 5.9
linux

linux kernel · 5.9 · update rc7
linux

linux kernel · 5.9 · update rc8
linux

linux kernel · 6.14 · update rc1
linux

linux kernel · 6.14 · update rc2
linux

Linux · 2fbc6e89b2f1403189e624cabaf73e189c5e50c6 to before ce3c6165fce0f06305c806696882a3ad4b90e33f, 2fbc6e89b2f1403189e624cabaf73e189c5e50c6 to before ea07480b23225942208f1b754fea1e7ec486d37e, 2fbc6e89b2f1403189e624cabaf73e189c5e50c6 to before 9b1766d1ff5fe496aabe9fc5f4e34e53f35c11c4, 2fbc6e89b2f1403189e624cabaf73e189c5e50c6 to before 4583748b65dee4d61bd50a2214715b4237bc152a, 2fbc6e89b2f1403189e624cabaf73e189c5e50c6 to before a39f61d212d822b3062d7f70fa0588e50e55664e, 2fbc6e89b2f1403189e624cabaf73e189c5e50c6 to before 139512191bd06f1b496117c76372b2ce372c9a41, f415c264176e6095e9dee823e09c5bdd0ee0d337, 98776a365da509ad923083ae54b38ee521c52742, 860e2cc78c697c95bc749abb20047239fa1722ea, 2b1be6c925cdf4638811765a9160796291494b89, 4.14.200 to before 4.15, 4.19.148 to before 4.20, 5.4.68 to before 5.5, 5.8.12 to before 5.9
Linux

Linux · 5.9
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

Component: Not specified by the source
File: net/ipv4/route.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.1/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.