CVE-2025-23151: linux kernel from 5.15.149 (inclusive), before 5.15.181 (exclusive), from 6.1.76 (inclusive), before 6.1.135…

Affected technology

linux kernel · from 5.15.149 (inclusive), before 5.15.181 (exclusive)
linux

linux kernel · from 6.1.76 (inclusive), before 6.1.135 (exclusive)
linux

linux kernel · from 6.6.15 (inclusive), before 6.6.88 (exclusive)
linux

linux kernel · from 6.7.3 (inclusive), before 6.12.24 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.13.12 (exclusive)
linux

linux kernel · from 6.14 (inclusive), before 6.14.3 (exclusive)
linux

debian linux · 11.0
debian

Linux · 176ed1727badd2fad2158e2b214dcbc24f4be7a1 to before 899d0353ea69681f474b6bc9de32c663b89672da, 0b093176fd0967a5f56e2c86b0d48247f6c0fa0f to before 3e7ecf181cbdde9753204ada3883ca1704d8702b, ce16274a6b8d1483d0d8383272deb2bfd1b577ca to before 5f084993c90d9d0b4a52a349ede5120f992a7ca1, b89b6a863dd53bc70d8e52d50f9cfaef8ef5e9c9 to before a77955f7704b2a00385e232cbcc1cb06b5c7a425, b89b6a863dd53bc70d8e52d50f9cfaef8ef5e9c9 to before 178e5657c8fd285125cc6743a81b513bce099760, b89b6a863dd53bc70d8e52d50f9cfaef8ef5e9c9 to before ee1fce83ed56450087309b9b74ad9bcb2b010fa6, b89b6a863dd53bc70d8e52d50f9cfaef8ef5e9c9 to before 0686a818d77a431fc3ba2fab4b46bbb04e8c9380, 642adb03541673f3897f64bbb62856ffd73807f5, 5.15.149 to before 5.15.181, 6.1.76 to before 6.1.135, 6.6.15 to before 6.6.88, 6.7.3 to before 6.8
Linux

Linux · 6.8
Linux

Component: Not specified by the source
File: drivers/bus/mhi/host/main.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.