CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2025-21859: linux kernel from 3.2 (inclusive), before 6.1.130 (exclusive), from 6.2 (inclusive), before 6.6.80 (exclusive), from…

CVE-2025-21859. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00191 (percentile 0.0816), scored 14-Oct-2026.

Affected technology

linux kernel · from 3.2 (inclusive), before 6.1.130 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.80 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.17 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.13.5 (exclusive)
linux

linux kernel · 6.14 · update rc1
linux

linux kernel · 6.14 · update rc2
linux

linux kernel · 6.14 · update rc3
linux

Linux · d5daf49b58661ec4af7a55b277176efbf945ca05 to before 727dee0857946b85232526de4f5a957fe163e89a, d5daf49b58661ec4af7a55b277176efbf945ca05 to before 1f10923404705a94891e612dff3b75e828a78368, d5daf49b58661ec4af7a55b277176efbf945ca05 to before b09957657d7767d164b3432af2129bd72947553c, d5daf49b58661ec4af7a55b277176efbf945ca05 to before 24a942610ee9bafb2692a456ae850c5b2e409b05, d5daf49b58661ec4af7a55b277176efbf945ca05 to before deeee3adb2c01eedab32c3b4519337689ad02e8a, d5daf49b58661ec4af7a55b277176efbf945ca05 to before e9fec6f42c45db2f62dc373fb1a10d2488c04e79, d5daf49b58661ec4af7a55b277176efbf945ca05 to before 8aa6b4be1f4efccbfc533e6ec8841d26e4fa8dba, d5daf49b58661ec4af7a55b277176efbf945ca05 to before 4ab37fcb42832cdd3e9d5e50653285ca84d6686f
Linux

Linux · 3.2
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
File: drivers/usb/gadget/function/f_midi.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-667
CCR priority
22.0 /100 (P4)
CVSS 3.1
5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS
0.00191 · percentile 0.0816 · 2026-10-14
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2025-21859.html