Get real-time updates on Telegram
CVE-2025-21859: linux kernel from 3.2 (inclusive), before 6.1.130 (exclusive), from 6.2 (inclusive), before 6.6.80 (exclusive), from…
CVE-2025-21859. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00191 (percentile 0.0816), scored 14-Oct-2026.
Affected technology
linux kernel · from 3.2 (inclusive), before 6.1.130 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.80 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.17 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.13.5 (exclusive)
linux
linux kernel · 6.14 · update rc1
linux
linux kernel · 6.14 · update rc2
linux
linux kernel · 6.14 · update rc3
linux
Linux · d5daf49b58661ec4af7a55b277176efbf945ca05 to before 727dee0857946b85232526de4f5a957fe163e89a, d5daf49b58661ec4af7a55b277176efbf945ca05 to before 1f10923404705a94891e612dff3b75e828a78368, d5daf49b58661ec4af7a55b277176efbf945ca05 to before b09957657d7767d164b3432af2129bd72947553c, d5daf49b58661ec4af7a55b277176efbf945ca05 to before 24a942610ee9bafb2692a456ae850c5b2e409b05, d5daf49b58661ec4af7a55b277176efbf945ca05 to before deeee3adb2c01eedab32c3b4519337689ad02e8a, d5daf49b58661ec4af7a55b277176efbf945ca05 to before e9fec6f42c45db2f62dc373fb1a10d2488c04e79, d5daf49b58661ec4af7a55b277176efbf945ca05 to before 8aa6b4be1f4efccbfc533e6ec8841d26e4fa8dba, d5daf49b58661ec4af7a55b277176efbf945ca05 to before 4ab37fcb42832cdd3e9d5e50653285ca84d6686f
Linux
Linux · 3.2
Linux
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens
Component: Not specified by the source
File: drivers/usb/gadget/function/f_midi.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-667
- CCR priority
- 22.0 /100 (P4)
- CVSS 3.1
- 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
- EPSS
- 0.00191 · percentile 0.0816 · 2026-10-14
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-21859.html