CVE-2025-21959: linux kernel from 4.14.92 (inclusive), before 4.15 (exclusive), from 4.18 (inclusive), before 5.4.292 (exclusive)…

Affected technology

linux kernel · from 4.14.92 (inclusive), before 4.15 (exclusive)
linux

linux kernel · from 4.18 (inclusive), before 5.4.292 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.236 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.180 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.132 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.84 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.20 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.13.8 (exclusive)
linux

linux kernel · 6.14 · update rc1
linux

linux kernel · 6.14 · update rc2
linux

linux kernel · 6.14 · update rc3
linux

linux kernel · 6.14 · update rc4
linux

linux kernel · 6.14 · update rc5
linux

linux kernel · 6.14 · update rc6
linux

Linux · b36e4523d4d56e2595e28f16f6ccf1cd6a9fc452 to before f522229c5563b59b4240261e406779bba6754159, b36e4523d4d56e2595e28f16f6ccf1cd6a9fc452 to before 2a154ce766b995494e88d8d117fa82cc6b73dd87, b36e4523d4d56e2595e28f16f6ccf1cd6a9fc452 to before e8544a5a97bee3674e7cd6bf0f3a4af517fa9146, b36e4523d4d56e2595e28f16f6ccf1cd6a9fc452 to before a62a25c6ad58fae997f48a0749afeda1c252ae51, b36e4523d4d56e2595e28f16f6ccf1cd6a9fc452 to before fda50302a13701d47fbe01e1739c7a51114144fb, b36e4523d4d56e2595e28f16f6ccf1cd6a9fc452 to before db1e0c0856821c59a32ea3af79476bf20a6beeb2, b36e4523d4d56e2595e28f16f6ccf1cd6a9fc452 to before 2db5baaf047a7c8d6ed5e2cc657b7854e155b7fc, b36e4523d4d56e2595e28f16f6ccf1cd6a9fc452 to before d653bfeb07ebb3499c403404c21ac58a16531607, 75af3d78168e654a5cd8bbc4c774f97be836165f, 4.14.92 to before 4.15
Linux

Linux · 4.18
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/netfilter/nf_conncount.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.3/10) rates confidentiality, integrity and availability impact as low. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.