CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2025-22121: linux kernel from 4.13 (inclusive), before 6.14.2 (exclusive); +4 more affected products

CVE-2025-22121. CVSS 3.1 base score 7.1 (HIGH, NVD). EPSS 0.00208 (percentile 0.1017), scored 14-Oct-2026.

Affected technology

linux kernel · from 4.13 (inclusive), before 6.14.2 (exclusive)
linux

Linux · e50e5129f384ae282adebfb561189cdb19b81cee to before 27202452b0bc942fdc3db72a44c4dcdab96d5b56, e50e5129f384ae282adebfb561189cdb19b81cee to before b374e9ecc92aaa7fb2ab221ee3ff5451118ab566, e50e5129f384ae282adebfb561189cdb19b81cee to before c000a8a9b5343a5ef867df173c6349672dacbd0f, e50e5129f384ae282adebfb561189cdb19b81cee to before 3c591353956ffcace2cc74d09930774afed60619, e50e5129f384ae282adebfb561189cdb19b81cee to before 098927a13fd918bd7c64c2de905350a1ad7b4a3a, e50e5129f384ae282adebfb561189cdb19b81cee to before 0c8fbb6ffb3c8f5164572ca88e4ccb6cd6a41ca8, e50e5129f384ae282adebfb561189cdb19b81cee to before 5701875f9609b000d91351eaa6bfd97fe2f157f4
Linux

Linux · 4.13
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: fs/ext4/inode.c, fs/ext4/xattr.c, fs/ext4/xattr.h

Attack conditions (Source advisory, CVSS 3.1): Local · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.4/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-125
CCR priority
28.5 /100 (P4)
CVSS 3.1
7.1 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H · NVD
EPSS
0.00208 · percentile 0.1017 · 2026-10-14
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2025-22121.html