CVE-2025-21865: linux kernel 5.4.290, 5.10.234, 5.15.177; +5 more affected products

Affected technology

linux kernel · from 6.1.127 (inclusive), before 6.1.130 (exclusive)
linux

linux kernel · from 6.6.74 (inclusive), before 6.6.80 (exclusive)
linux

linux kernel · from 6.12.11 (inclusive), before 6.12.17 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.13.5 (exclusive)
linux

linux kernel · 5.4.290
linux

linux kernel · 5.10.234
linux

linux kernel · 5.15.177
linux

linux kernel · 6.14 · update rc1
linux

linux kernel · 6.14 · update rc2
linux

linux kernel · 6.14 · update rc3
linux

Linux · c986380c1d5274c4d5e935addc807d6791cc23eb to before 7f86fb07db65a470d0c11f79da551bd9466357dc, 5f1678346109ff3a6d229d33437fcba3cce9209d to before 33eb925c0c26e86ca540a08254806512bf911f22, 036f8d814a2cd11ee8ef62b8f3e7ce5dec0ee4f3 to before cb15bb1bde0ba97cbbed9508e45210dcafec3657, efec287cbac92ac6ee8312a89221854760e13b34 to before b70fa591b066d52b141fc430ffdee35b6cc87a66, bb11f992f5a475bc68ef959f17a55306f0328495 to before 9d03e7e37187ae140e716377599493987fb20c5b, 86f73d4ab2f27deeff22ba9336ad103d94f12ac7 to before ff81b14010362f6188ca26fec22ff05e4da45595, eb28fd76c0a08a47b470677c6cef9dd1c60e92d1 to before 37e7644b961600ef0beb01d3970c3034a62913af, eb28fd76c0a08a47b470677c6cef9dd1c60e92d1 to before 4ccacf86491d33d2486b62d4d44864d7101b299d, 5.4.290 to before 5.4.291, 5.10.234 to before 5.10.235, 5.15.177 to before 5.15.179, 6.1.127 to before 6.1.130, 6.6.74 to before 6.6.80, 6.12.11 to before 6.12.17
Linux

Linux · 6.13
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

Component: Not specified by the source
File: drivers/net/gtp.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.