CVE-2025-21971: linux kernel 2.6.25; +1 more affected products

Affected technology

linux kernel · from 2.6.26 (inclusive), before 5.4.292 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.236 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.180 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.132 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.84 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.20 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.13.8 (exclusive)
linux

linux kernel · 2.6.25
linux

linux kernel · 6.14 · update rc1
linux

linux kernel · 6.14 · update rc2
linux

linux kernel · 6.14 · update rc3
linux

linux kernel · 6.14 · update rc4
linux

linux kernel · 6.14 · update rc5
linux

linux kernel · 6.14 · update rc6
linux

Linux · 066a3b5b2346febf9a655b444567b7138e3bb939 to before e05d9938b1b0ac40b6054cc5fa0ccbd9afd5ed4c, 066a3b5b2346febf9a655b444567b7138e3bb939 to before 7a82fe67a9f4d7123d8e5ba8f0f0806c28695006, 066a3b5b2346febf9a655b444567b7138e3bb939 to before 003d92c91cdb5a64b25a9a74cb8543aac9a8bb48, 066a3b5b2346febf9a655b444567b7138e3bb939 to before e5ee00607bbfc97ef1526ea95b6b2458ac9e7cb7, 066a3b5b2346febf9a655b444567b7138e3bb939 to before 78533c4a29ac3aeddce4b481770beaaa4f3bfb67, 066a3b5b2346febf9a655b444567b7138e3bb939 to before 5c3ca9cb48b51bd72bf76b8b05e24f3cd53db5e7, 066a3b5b2346febf9a655b444567b7138e3bb939 to before 94edfdfb9505ab608e86599d1d1e38c83816fc1c, 066a3b5b2346febf9a655b444567b7138e3bb939 to before 0c3057a5a04d07120b3d0ec9c79568fceb9c921e
Linux

Linux · 2.6.25
Linux

Component: Not specified by the source
Function: qdisc_tree_reduce_backlog
File: net/sched/sch_api.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.