P5Verified

CVE-2025-22060: linux kernel from 3.17 (inclusive), before 5.15.180 (exclusive), from 5.16 (inclusive), before 6.1.134 (exclusive)…

CVE-2025-22060. CVSS 3.1 base score 4.7 (MEDIUM, NVD). EPSS 0.00155 (percentile 0.04167), scored 14-Oct-2026.

Affected technology

linux kernel · from 3.17 (inclusive), before 5.15.180 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.134 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.87 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.23 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.13.11 (exclusive)
linux

linux kernel · from 6.14 (inclusive), before 6.14.2 (exclusive)
linux

Linux · 3f518509dedc99f0b755d2ce68d24f610e3a005a to before e3711163d14d02af9005e4cdad30899c565f13fb, 3f518509dedc99f0b755d2ce68d24f610e3a005a to before b3f48a41a00d6d8d9c6fe09ae47dd21c8c1c8b03, 3f518509dedc99f0b755d2ce68d24f610e3a005a to before 5b0ae1723a7d9574ae1aee7d9cf9757a30069865, 3f518509dedc99f0b755d2ce68d24f610e3a005a to before fcbfb54a0269875cf3cd6a2bff4f85a2e0a0b552, 3f518509dedc99f0b755d2ce68d24f610e3a005a to before e64e9b6e86b39db3baa576fd73da73533b54cb2d, 3f518509dedc99f0b755d2ce68d24f610e3a005a to before 46c1e23e34c9d1eaadf37f88216d9d8ce0d0bcee, 3f518509dedc99f0b755d2ce68d24f610e3a005a to before 96844075226b49af25a69a1d084b648ec2d9b08d
Linux

Linux · 3.17
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: drivers/net/ethernet/marvell/mvpp2/mvpp2.h, drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c, drivers/net/ethernet/marvell/mvpp2/mvpp2_prs.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 15-Oct-2026 09:20 UTC

CWE: CWE-367
CCR priority: 18.8 /100 (P5)
CVSS 3.1: 4.7 /10 · CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS: 0.00155 · percentile 0.04167 · 2026-10-14
KEV: no

Provenance

FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2025-22060.html