CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2025-22044: linux kernel from 5.9 (inclusive), before 5.10.236 (exclusive), from 5.11 (inclusive), before 5.15.180 (exclusive)…

CVE-2025-22044. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00216 (percentile 0.11143), scored 14-Oct-2026.

Affected technology

linux kernel · from 5.9 (inclusive), before 5.10.236 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.180 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.134 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.87 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.23 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.13.11 (exclusive)
linux

linux kernel · from 6.14 (inclusive), before 6.14.2 (exclusive)
linux

Linux · 6450ddbd5d8e83ea9927c7f9076a21f829699e0f to before 4b65cff06a004ac54f6ea8886060f0d07b1ca055, 6450ddbd5d8e83ea9927c7f9076a21f829699e0f to before 92ba06aef65522483784dcbd6697629ddbd4c4f9, 6450ddbd5d8e83ea9927c7f9076a21f829699e0f to before bae5b55e0f327102e78f6a66fb127275e9bc91b6, 6450ddbd5d8e83ea9927c7f9076a21f829699e0f to before c90402d2a226ff7afbe1d0650bee8ecc15a91049, 6450ddbd5d8e83ea9927c7f9076a21f829699e0f to before e71a57c5aaa389d4c3c82f920761262efdd18d38, 6450ddbd5d8e83ea9927c7f9076a21f829699e0f to before 73851cfceb00cc77d7a0851bc10f2263394c3e87, 6450ddbd5d8e83ea9927c7f9076a21f829699e0f to before 85f11291658ab907c4294319c8102450cc75bb96, 6450ddbd5d8e83ea9927c7f9076a21f829699e0f to before 2ff0e408db36c21ed3fa5e3c1e0e687c82cf132f
Linux

Linux · 5.9
Linux

Component: Not specified by the source
File: drivers/acpi/nfit/core.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-704
CCR priority
22.1 /100 (P4)
CVSS 3.1
5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS
0.00216 · percentile 0.11143 · 2026-10-14
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2025-22044.html