Get real-time updates on Telegram
CVE-2025-40214: Linux 6.10; +1 more affected products
CVE-2025-40214. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00148 (percentile 0.03593), scored 19-Oct-2026.
Affected technology
Linux · adfb68b39b39767d6bfb53e48c4f19c183765686 to before 20003fbb9174121b27bd1da6ebe61542ac4c327d, d23802221f6755e104606864067c71af8cdb6788 to before 4cd8d755c7d4f515dd9abf483316aca2f1b7b0f3, ad081928a8b0f57f269df999a28087fce6f2b6ce to before db81ad20fd8aef7cc7d536c52ee5ea4c1f979128, ad081928a8b0f57f269df999a28087fce6f2b6ce to before 1aa7e40ee850c9053e769957ce6541173891204d, ad081928a8b0f57f269df999a28087fce6f2b6ce to before 60e6489f8e3b086bd1130ad4450a2c112e863791, 6.1.141 to before 6.1.159, 6.6.93 to before 6.6.117
Linux
Linux · 6.10
Linux
RUGGEDCOM RST2428P · 0 to before V4.0
Siemens
Component: Not specified by the source
File: net/unix/garbage.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 31.2 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00148 · percentile 0.03593 · 2026-10-19
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-20 01:44:01.123206+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-40214.html