CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2025-21806: linux kernel 2.6.12; +3 more affected products

CVE-2025-21806. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00219 (percentile 0.11479), scored 14-Oct-2026.

Affected technology

linux kernel · from 2.6.13 (inclusive), before 5.4.291 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.235 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.179 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.129 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.76 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.13 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.13.2 (exclusive)
linux

linux kernel · 2.6.12
linux

Linux · e3876605450979fe52a1a03e7eb78a89bf59e76a to before d0e0f9c8218826926d7692980c98236d9f21fd3c, e3876605450979fe52a1a03e7eb78a89bf59e76a to before c337c08819a4ec49edfdcd8fc46fbee120d8a5b2, e3876605450979fe52a1a03e7eb78a89bf59e76a to before 0e2f1d93d287d544d26f8ff293ea820a8079b9f8, e3876605450979fe52a1a03e7eb78a89bf59e76a to before 5860abbf15eeb61838b5e32e721ba67b0aa84450, e3876605450979fe52a1a03e7eb78a89bf59e76a to before 6ce38b5a6a49e65bad163162a54cb3f104c40b48, e3876605450979fe52a1a03e7eb78a89bf59e76a to before 33e2168788f8fb5cb8bd4f36cb1ef37d1d34dada, e3876605450979fe52a1a03e7eb78a89bf59e76a to before 1489824e5226a26841c70639ebd2d1aed390764b, e3876605450979fe52a1a03e7eb78a89bf59e76a to before d1f9f79fa2af8e3b45cffdeef66e05833480148a
Linux

Linux · 2.6.12
Linux

SIMATIC S7-1500 TM MFP - BIOS · 0 to before *
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
Function: process_backlog
File: net/core/sysctl_net_core.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CCR priority
22.1 /100 (P4)
CVSS 3.1
5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS
0.00219 · percentile 0.11479 · 2026-10-14
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2025-21806.html