CVE-2025-21862: linux kernel from 2.6.30 (inclusive), before 6.1.130 (exclusive), from 6.2 (inclusive), before 6.6.80 (exclusive)…

Affected technology

linux kernel · from 2.6.30 (inclusive), before 6.1.130 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.80 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.17 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.13.5 (exclusive)
linux

linux kernel · 6.14 · update rc1
linux

linux kernel · 6.14 · update rc2
linux

linux kernel · 6.14 · update rc3
linux

Linux · 9a8afc8d3962f3ed26fd6b56db34133860ed1e72 to before 6e9e0f224ffd8b819da3ea247dda404795fdd182, 9a8afc8d3962f3ed26fd6b56db34133860ed1e72 to before 29f9cdcab3d96d5207a5c92b52c40ad75e5915d8, 9a8afc8d3962f3ed26fd6b56db34133860ed1e72 to before 872c7c7e57a746046796ddfead529c9d37b9f6b4, 9a8afc8d3962f3ed26fd6b56db34133860ed1e72 to before fcfc00bfec7bb6661074cb21356d05a4c9470a3c, 9a8afc8d3962f3ed26fd6b56db34133860ed1e72 to before 0efa6c42f81c60d8f72ba7f5ed8d4fec8c526282, 9a8afc8d3962f3ed26fd6b56db34133860ed1e72 to before b7859e8643e75619b2705b4fcac93ffd94d72b4a, 9a8afc8d3962f3ed26fd6b56db34133860ed1e72 to before 219a47d0e6195bd202f22855e35f25bd15bc4d58, 9a8afc8d3962f3ed26fd6b56db34133860ed1e72 to before 07b598c0e6f06a0f254c88dafb4ad50f8a8c6eea
Linux

Linux · 2.6.30
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

Component: Not specified by the source
File: net/core/drop_monitor.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.