CVE-2025-21926: linux kernel from 4.18 (inclusive), before 5.4.291 (exclusive), from 5.5 (inclusive), before 5.10.235 (exclusive)…

Affected technology

linux kernel · from 4.18 (inclusive), before 5.4.291 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.235 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.179 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.131 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.83 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.19 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.13.7 (exclusive)
linux

linux kernel · 6.14 · update rc1
linux

linux kernel · 6.14 · update rc2
linux

linux kernel · 6.14 · update rc3
linux

linux kernel · 6.14 · update rc4
linux

linux kernel · 6.14 · update rc5
linux

Linux · ad405857b174ed31a97982bb129c320d03321cf5 to before 9f28205ddb76e86cac418332e952241d85fed0dc, ad405857b174ed31a97982bb129c320d03321cf5 to before a2d1cca955ed34873e524cc2e6e885450d262f05, ad405857b174ed31a97982bb129c320d03321cf5 to before 455217ac9db0cf9349b3933664355e907bb1a569, ad405857b174ed31a97982bb129c320d03321cf5 to before e8db70537878e1bb3fd83e5abcc6feefc0587828, ad405857b174ed31a97982bb129c320d03321cf5 to before 01a83237644d6822bc7df2c5564fc81b0df84358, ad405857b174ed31a97982bb129c320d03321cf5 to before 084819b0d8b1bd433b90142371eb9450d657f8ca, ad405857b174ed31a97982bb129c320d03321cf5 to before c32da44cc9298eaa6109e3fc2c2b4e07cc4bf11b, ad405857b174ed31a97982bb129c320d03321cf5 to before ee01b2f2d7d0010787c2343463965bbc283a497f
Linux

Linux · 4.18
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/ipv4/udp_offload.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.