CVE-2025-22090: linux kernel from 2.6.29 (inclusive), before 6.6.87 (exclusive), from 6.7 (inclusive), before 6.12.23 (exclusive)…

Affected technology

linux kernel · from 2.6.29 (inclusive), before 6.6.87 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.23 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.13.11 (exclusive)
linux

linux kernel · from 6.14 (inclusive), before 6.14.2 (exclusive)
linux

Linux · 2ab640379a0ab4cef746ced1d7e04a0941774bcb to before a6623712ba8449876f0b3de9462831523fb851e4, 2ab640379a0ab4cef746ced1d7e04a0941774bcb to before b07398e8a5da517083f5c3f2daa8f6681b48ab28, 2ab640379a0ab4cef746ced1d7e04a0941774bcb to before 8d6373f83f367dbed316ddeb178130a3a64b5b67, 2ab640379a0ab4cef746ced1d7e04a0941774bcb to before da381c33f3aa6406406c9fdf07b8b0b63e0ce722, 2ab640379a0ab4cef746ced1d7e04a0941774bcb to before de6185b8892d88142ef69768fe4077cbf40109c0, 2ab640379a0ab4cef746ced1d7e04a0941774bcb to before dc84bc2aba85a1508f04a936f9f9a15f64ebfb31
Linux

Linux · 2.6.29
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: arch/x86/mm/pat/memtype.c, include/linux/pgtable.h, kernel/fork.c, mm/memory.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.3/10) rates confidentiality impact as low; integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.