CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2025-22021: linux kernel 6.14; +1 more affected products

CVE-2025-22021. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00463 (percentile 0.38558), scored 14-Oct-2026.

Affected technology

linux kernel · from 3.13 (inclusive), before 5.4.292 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.236 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.180 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.133 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.86 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.22 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.13.10 (exclusive)
linux

linux kernel · 6.14
linux

Linux · eb31628e37a0a4e01fffd79dcc7f815d2357f53a to before 6488b96a79a26e19100ad872622f04e93b638d7f, eb31628e37a0a4e01fffd79dcc7f815d2357f53a to before 58ab63d3ded2ca6141357a2b24eee8453d0f871d, eb31628e37a0a4e01fffd79dcc7f815d2357f53a to before 1ca2169cc19dca893c7aae6af122852097435d16, eb31628e37a0a4e01fffd79dcc7f815d2357f53a to before 1ec43100f7123010730b7ddfc3d5c2eac19e70e7, eb31628e37a0a4e01fffd79dcc7f815d2357f53a to before 5251041573850e5020cd447374e23010be698898, eb31628e37a0a4e01fffd79dcc7f815d2357f53a to before 2bb139e483f8cbe488d19d8c1135ac3615e2668c, eb31628e37a0a4e01fffd79dcc7f815d2357f53a to before 41904cbb343d115931d6bf79aa2c815cac4ef72b, eb31628e37a0a4e01fffd79dcc7f815d2357f53a to before 221c27259324ec1404f028d4f5a0f2ae7f63ee23, eb31628e37a0a4e01fffd79dcc7f815d2357f53a to before 932b32ffd7604fb00b5c57e239a3cc4d901ccf6e
Linux

Linux · 3.13
Linux

Component: Not specified by the source
File: net/ipv6/netfilter/nf_socket_ipv6.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 10.0/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CCR priority
22.1 /100 (P4)
CVSS 3.1
5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS
0.00463 · percentile 0.38558 · 2026-10-14
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2025-22021.html