CVE-2025-21858: linux kernel from 4.2 (inclusive), before 6.1.130 (exclusive), from 6.2 (inclusive), before 6.6.80 (exclusive), from…

Affected technology

linux kernel · from 4.2 (inclusive), before 6.1.130 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.80 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.17 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.13.5 (exclusive)
linux

linux kernel · 6.14 · update rc1
linux

linux kernel · 6.14 · update rc2
linux

linux kernel · 6.14 · update rc3
linux

Linux · 2d07dc79fe04a43d82a346ced6bbf07bdb523f1b to before d5e86e27de0936f3cb0a299ce519d993e9cf3886, 2d07dc79fe04a43d82a346ced6bbf07bdb523f1b to before 5a0538ac6826807d6919f6aecbb8996c2865af2c, 2d07dc79fe04a43d82a346ced6bbf07bdb523f1b to before f74f6560146714241c6e167b03165ee77a86e316, 2d07dc79fe04a43d82a346ced6bbf07bdb523f1b to before 904e746b2e7fa952ab8801b303ce826a63153d78, 2d07dc79fe04a43d82a346ced6bbf07bdb523f1b to before 3ce92ca990cfac88a87c61df3cc0b5880e688ecf, 2d07dc79fe04a43d82a346ced6bbf07bdb523f1b to before da9b0ae47f084014b1e4b3f31f70a0defd047ff3, 2d07dc79fe04a43d82a346ced6bbf07bdb523f1b to before 788dbca056a8783ec063da3c9d49a3a71c76c283, 2d07dc79fe04a43d82a346ced6bbf07bdb523f1b to before 9593172d93b9f91c362baec4643003dc29802929
Linux

Linux · 4.2
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
File: drivers/net/geneve.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.