CVE-2025-21772: linux kernel before 5.4.291 (exclusive), from 5.5 (inclusive), before 5.10.235 (exclusive), from 5.11 (inclusive)…

Affected technology

linux kernel · before 5.4.291 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.235 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.179 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.129 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.79 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.16 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.13.4 (exclusive)
linux

linux kernel · 6.14 · update rc1
linux

linux kernel · 6.14 · update rc2
linux

Linux · 02e2a5bfebe99edcf9d694575a75032d53fe1b73 to before a3e77da9f843e4ab93917d30c314f0283e28c124, 02e2a5bfebe99edcf9d694575a75032d53fe1b73 to before 213ba5bd81b7e97ac6e6190b8f3bc6ba76123625, 02e2a5bfebe99edcf9d694575a75032d53fe1b73 to before 40a35d14f3c0dc72b689061ec72fc9b193f37d1f, 02e2a5bfebe99edcf9d694575a75032d53fe1b73 to before 27a39d006f85e869be68c1d5d2ce05e5d6445bf5, 02e2a5bfebe99edcf9d694575a75032d53fe1b73 to before 92527100be38ede924768f4277450dfe8a40e16b, 02e2a5bfebe99edcf9d694575a75032d53fe1b73 to before 6578717ebca91678131d2b1f4ba4258e60536e9f, 02e2a5bfebe99edcf9d694575a75032d53fe1b73 to before 7fa9706722882f634090bfc9af642bf9ed719e27, 02e2a5bfebe99edcf9d694575a75032d53fe1b73 to before 80e648042e512d5a767da251d44132553fe04ae0, 81a319c5c29913a23947f3d28513974682f3af03, 34a906cd9f6445d9510841667eff0d980279ebf3, 2a27f61bd411e564eb4651c18d225f6e9e1de534, 69aad7e01c8e883e9d2f8dc5523bd419bd02d2aa, 7f4f03c4a1e9a4b9679feafe7625a780864a4e76, 3.2.75 to before 3.3, 3.4.113 to before 3.5, 3.10.99 to before 3.11, 3.12.56 to before 3.13, 3.14.63 to before 3.15
Linux

Linux · 4.4
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
File: block/partitions/mac.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.