Get real-time updates on Telegram
CVE-2025-40219: Linux 5.0; +3 more affected products
CVE-2025-40219 affects azl3 kernel 6.6.112.1-2 on Azure Linux 3.0. CVSS 3.1 base score 5.5 (Microsoft Security Response Center). EPSS 0.00224 (percentile 0.12029), scored 14-Oct-2026.
Affected technology
Linux · 18f9e9d150fccfa747875df6f0a9f606740762b3 to before 3cddde484471c602bea04e6f384819d336a1ff84, 18f9e9d150fccfa747875df6f0a9f606740762b3 to before d7673ac466eca37ec3e6b7cc9ccdb06de3304e9b, 18f9e9d150fccfa747875df6f0a9f606740762b3 to before 7c37920c96b85ef4255a7acc795e99e63dd38d59, 18f9e9d150fccfa747875df6f0a9f606740762b3 to before 1047ca2d816994f31e1475e63e0c0b7825599747, 18f9e9d150fccfa747875df6f0a9f606740762b3 to before 97c18f074ff1c12d016a0753072a3afdfa0b9611, 18f9e9d150fccfa747875df6f0a9f606740762b3 to before bea1d373098b22d7142da48750ce5526096425bc, 18f9e9d150fccfa747875df6f0a9f606740762b3 to before f3015627b6e9ddf85cfeaf42405b3c194dde2c36, 18f9e9d150fccfa747875df6f0a9f606740762b3 to before a5338e365c4559d7b4d7356116b0eb95b12e08d5
Linux
Linux · 5.0
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: drivers/pci/iov.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- Product
- azl3 kernel 6.6.112.1-2 on Azure Linux 3.0
- CCR priority
- 22.1 /100 (P4)
- CVSS 3.1
- 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U · Microsoft Security Response Center
- EPSS
- 0.00224 · percentile 0.12029 · 2026-10-14
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
- Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-40219.html