CVE-2025-21844: linux kernel 5.10.211, 5.15.150; +2 more affected products

Affected technology

linux kernel · from 6.1.69 (inclusive), before 6.1.130 (exclusive)
linux

linux kernel · from 6.6.8 (inclusive), before 6.6.80 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.17 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.13.5 (exclusive)
linux

linux kernel · 5.10.211
linux

linux kernel · 5.15.150
linux

linux kernel · 6.14 · update rc1
linux

linux kernel · 6.14 · update rc2
linux

linux kernel · 6.14 · update rc3
linux

Linux · b03c8099a738a04d2343547ae6a04e5f0f63d3fa to before f277e479eea3d1aa18bc712abe1d2bf3dece2e30, 858e73ff25639a0cc1f6f8d2587b62c045867e41 to before f618aeb6cad2307e48a641379db610abcf593edf, 9f528a8e68327117837b5e28b096f52af4c26a05 to before 24e8e4523d3071bc5143b0db9127d511489f7b3b, 534733397da26de0303057ce0b93a22bda150365 to before 9e5d99a4cf2e23c716b44862975548415fae5391, eec04ea119691e65227a97ce53c0da6b9b74b0b7 to before a9b0b4b29877cb4dc5d0842b59b5ccbacddb85bd, eec04ea119691e65227a97ce53c0da6b9b74b0b7 to before 554736b583f529ee159aa95af9a0cbc12b5ffc96, eec04ea119691e65227a97ce53c0da6b9b74b0b7 to before 860ca5e50f73c2a1cef7eefc9d39d04e275417f7, 5.10.211 to before 5.10.235, 5.15.150 to before 5.15.179, 6.1.69 to before 6.1.130, 6.6.8 to before 6.6.80
Linux

Linux · 6.7
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
File: fs/smb/client/smb2ops.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.