CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2025-21785: linux kernel from 4.0 (inclusive), before 6.1.129 (exclusive), from 6.2 (inclusive), before 6.6.79 (exclusive), from…

CVE-2025-21785. CVSS 3.1 base score 7.8 (HIGH, NVD). EPSS 0.00273 (percentile 0.18335), scored 14-Oct-2026.

Affected technology

linux kernel · from 4.0 (inclusive), before 6.1.129 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.79 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.16 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.13.4 (exclusive)
linux

linux kernel · 6.14 · update rc1
linux

linux kernel · 6.14 · update rc2
linux

Linux · 5d425c18653731af62831d30a4fa023d532657a9 to before 4371ac7b494e933fffee2bd6265d18d73c4f05aa, 5d425c18653731af62831d30a4fa023d532657a9 to before e4fde33107351ec33f1a64188612fbc6ca659284, 5d425c18653731af62831d30a4fa023d532657a9 to before 88a3e6afaf002250220793df99404977d343db14, 5d425c18653731af62831d30a4fa023d532657a9 to before 4ff25f0b18d1d0174c105e4620428bcdc1213860, 5d425c18653731af62831d30a4fa023d532657a9 to before ab90894f33c15b14c1cee6959ab6c8dcb09127f8, 5d425c18653731af62831d30a4fa023d532657a9 to before 715eb1af64779e1b1aa0a7b2ffb81414d9f708e5, 5d425c18653731af62831d30a4fa023d532657a9 to before 67b99a2b5811df4294c2ad50f9bff3b6a08bd618, 5d425c18653731af62831d30a4fa023d532657a9 to before 875d742cf5327c93cba1f11e12b08d3cce7a88d2
Linux

Linux · 4.0
Linux

Component: Not specified by the source
File: arch/arm64/kernel/cacheinfo.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-787
CCR priority
31.3 /100 (P4)
CVSS 3.1
7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · NVD
EPSS
0.00273 · percentile 0.18335 · 2026-10-14
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2025-21785.html