CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2025-21796: linux kernel from 2.6.13 (inclusive), before 5.10.235 (exclusive), from 5.11 (inclusive), before 5.15.179 (exclusive)…

CVE-2025-21796. CVSS 3.1 base score 9.8 (CRITICAL, Source advisory). EPSS 0.00648 (percentile 0.49863), scored 14-Oct-2026.

Affected technology

linux kernel · from 2.6.13 (inclusive), before 5.10.235 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.179 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.129 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.79 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.16 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.13.4 (exclusive)
linux

linux kernel · 6.14 · update rc1
linux

linux kernel · 6.14 · update rc2
linux

Linux · a257cdd0e2179630d3201c32ba14d7fcb3c3a055 to before 8a1737ae42c928384ab6447f6ee1a882510e85fa, a257cdd0e2179630d3201c32ba14d7fcb3c3a055 to before 6f7cfee1a316891890c505563aa54f3476db52fd, a257cdd0e2179630d3201c32ba14d7fcb3c3a055 to before 2e59b2b68782519560b3d6a41dd66a3d01a01cd3, a257cdd0e2179630d3201c32ba14d7fcb3c3a055 to before 55d947315fb5f67a35e4e1d3e01bb886b9c6decf, a257cdd0e2179630d3201c32ba14d7fcb3c3a055 to before f8d871523142f7895f250a856f8c4a4181614510, a257cdd0e2179630d3201c32ba14d7fcb3c3a055 to before 1fd94884174bd20beb1773990fd3b1aa877688d9, a257cdd0e2179630d3201c32ba14d7fcb3c3a055 to before 7faf14a7b0366f153284db0ad3347c457ea70136
Linux

Linux · 2.6.13
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: fs/nfsd/nfs2acl.c, fs/nfsd/nfs3acl.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-416
CCR priority
39.4 /100 (P4)
CVSS 3.1
9.8 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS
0.00648 · percentile 0.49863 · 2026-10-14
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2025-21796.html