CVE-2025-21767: linux kernel from 5.10.50 (inclusive), before 5.10.235 (exclusive), from 5.12.17 (inclusive), before 5.13 (exclusive)…

Affected technology

linux kernel · from 5.10.50 (inclusive), before 5.10.235 (exclusive)
linux

linux kernel · from 5.12.17 (inclusive), before 5.13 (exclusive)
linux

linux kernel · from 5.13.2 (inclusive), before 5.15.179 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.129 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.79 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.16 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.13.4 (exclusive)
linux

linux kernel · 6.14 · update rc1
linux

Linux · d9b40ebd448e437ffbc65f013836f98252279a82 to before d9c217fadfcff7a8df58567517d1e4253f3fd243, 7560c02bdffb7c52d1457fa551b9e745d4b9e754 to before 60f54f0d4ea530950549a8263e6fdd70a40490a4, 7560c02bdffb7c52d1457fa551b9e745d4b9e754 to before 852805b6cbdb69c298a8fc9fbe79994c95106e04, 7560c02bdffb7c52d1457fa551b9e745d4b9e754 to before 8783ceeee797d9aa9cfe150690fb9d0bac8cc459, 7560c02bdffb7c52d1457fa551b9e745d4b9e754 to before cc3d79e7c806cb57d71c28a4a35e7d7fb3265faa, 7560c02bdffb7c52d1457fa551b9e745d4b9e754 to before 0fb534187d2355f6c8f995321e76d1ccd1262ac1, 7560c02bdffb7c52d1457fa551b9e745d4b9e754 to before 6bb05a33337b2c842373857b63de5c9bf1ae2a09, 193e14e68e907b2a7a936a7726accbaa4df25a4d, 155d3c5d24ee13cafa6236b49fc02b240a511d59, 5.10.50 to before 5.10.235, 5.12.17 to before 5.13, 5.13.2 to before 5.14
Linux

Linux · 5.14
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

Component: Not specified by the source
Function: called, invokes
File: kernel/time/clocksource.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.