Get real-time updates on Telegram
CVE-2025-21861: linux kernel from 4.14 (inclusive), before 6.12.17 (exclusive), from 6.13 (inclusive), before 6.13.5 (exclusive), 6.14…
CVE-2025-21861. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00233 (percentile 0.13147), scored 14-Oct-2026.
Affected technology
linux kernel · from 4.14 (inclusive), before 6.12.17 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.13.5 (exclusive)
linux
linux kernel · 6.14 · update rc1
linux
linux kernel · 6.14 · update rc2
linux
linux kernel · 6.14 · update rc3
linux
Linux · 8763cb45ab967a92a5ee49e9c544c0f0ea90e2d6 to before 61fa824e304ed162fe965f64999068e6fcff2059, 8763cb45ab967a92a5ee49e9c544c0f0ea90e2d6 to before 64397b0cb7c09e3ef3f9f5c7c17299c4eebd3875, 8763cb45ab967a92a5ee49e9c544c0f0ea90e2d6 to before 4f52f7c50f5b6f5eeb06823e21fe546d90f9c595, 8763cb45ab967a92a5ee49e9c544c0f0ea90e2d6 to before 20fb6fc51863fbff7868de8b5f6d249d2094df1f, 8763cb45ab967a92a5ee49e9c544c0f0ea90e2d6 to before 78f579cb7d825134e071a1714d8d0c4fd0ffe459, 8763cb45ab967a92a5ee49e9c544c0f0ea90e2d6 to before 3f9240d59e9a95d19f06120bfd1d0e681c6c0ac7, 8763cb45ab967a92a5ee49e9c544c0f0ea90e2d6 to before 069dd21ea8262204f94737878389c2815a054a9e, 8763cb45ab967a92a5ee49e9c544c0f0ea90e2d6 to before 41cddf83d8b00f29fd105e7a0777366edc69a5cf
Linux
Linux · 4.14
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: mm/migrate_device.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-416
- CCR priority
- 22.1 /100 (P4)
- CVSS 3.1
- 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
- EPSS
- 0.00233 · percentile 0.13147 · 2026-10-14
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-21861.html