CVE-2025-22055: linux kernel from 4.19 (inclusive), before 5.10.236 (exclusive), from 5.11 (inclusive), before 5.15.180 (exclusive)…

Affected technology

linux kernel · from 4.19 (inclusive), before 5.10.236 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.180 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.134 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.87 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.23 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.13.11 (exclusive)
linux

linux kernel · from 6.14 (inclusive), before 6.14.2 (exclusive)
linux

Linux · 0ed5269f9e41f495c8e9020c85f5e1644c1afc57 to before a2cb85f989e2074e2f392e00188c438cab3de088, 0ed5269f9e41f495c8e9020c85f5e1644c1afc57 to before b4513ad0f391871d3feee8ddf535609a3aabeeac, 0ed5269f9e41f495c8e9020c85f5e1644c1afc57 to before 21748669c5825761cbbf47cbeeb01387ddccc8cb, 0ed5269f9e41f495c8e9020c85f5e1644c1afc57 to before 5a2976cc4d9c36ff58a0f10e35ce4283cbaa9c0e, 0ed5269f9e41f495c8e9020c85f5e1644c1afc57 to before 2952776c69a1a551649ed770bf22e3f691f6ec65, 0ed5269f9e41f495c8e9020c85f5e1644c1afc57 to before 738ae5712215fe9181587d582b23333f02c62ca6, 0ed5269f9e41f495c8e9020c85f5e1644c1afc57 to before 4d606069bdd3c76f8ab1f06796c97ef7f4746807, 0ed5269f9e41f495c8e9020c85f5e1644c1afc57 to before b27055a08ad4b415dcf15b63034f9cb236f7fb40
Linux

Linux · 4.19
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/ipv4/ip_tunnel_core.c, net/netfilter/nft_tunnel.c, net/sched/act_tunnel_key.c, net/sched/cls_flower.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.