CVE-2025-22056: linux kernel from 5.7 (inclusive), before 5.10.236 (exclusive), from 5.11 (inclusive), before 5.15.180 (exclusive)…

Affected technology

linux kernel · from 5.7 (inclusive), before 5.10.236 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.180 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.134 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.87 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.23 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.13.11 (exclusive)
linux

linux kernel · from 6.14 (inclusive), before 6.14.2 (exclusive)
linux

Linux · 925d844696d9287f841d6b3e0ed62a35fb175970 to before 31d49eb436f2da61280508d7adf8c9b473b967aa, 925d844696d9287f841d6b3e0ed62a35fb175970 to before ca2adfc03cd6273f0b589fe65afc6f75e0fe116e, 925d844696d9287f841d6b3e0ed62a35fb175970 to before a263d31c8c92e5919d41af57d9479cfb66323782, 925d844696d9287f841d6b3e0ed62a35fb175970 to before 28d88ee1e1cc8ac2d79aeb112717b97c5c833d43, 925d844696d9287f841d6b3e0ed62a35fb175970 to before 0a93a710d6df334b828ea064c6d39fda34f901dc, 925d844696d9287f841d6b3e0ed62a35fb175970 to before 446d94898c560ed2f61e26ae445858a4c4830762, 925d844696d9287f841d6b3e0ed62a35fb175970 to before 708e268acb3a446ad2a8a3d2e9bd41cc23660cd6, 925d844696d9287f841d6b3e0ed62a35fb175970 to before 1b755d8eb1ace3870789d48fbd94f386ad6e30be
Linux

Linux · 5.7
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/netfilter/nft_tunnel.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.