CVE-2025-40251: linux kernel from 5.14 (inclusive), before 6.1.164 (exclusive), from 6.2 (inclusive), before 6.6.118 (exclusive), from…

Affected technology

linux kernel · from 5.14 (inclusive), before 6.1.164 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.118 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.60 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.17.10 (exclusive)
linux

linux kernel · 6.18 · update rc1
linux

linux kernel · 6.18 · update rc2
linux

linux kernel · 6.18 · update rc3
linux

linux kernel · 6.18 · update rc4
linux

linux kernel · 6.18 · update rc5
linux

linux kernel · 6.18 · update rc6
linux

Linux · d7555984507822458b32a6405881038241d140be to before 90e51e20bcec9bff5b2421ce1bd95704764655f5, d7555984507822458b32a6405881038241d140be to before 715d9cda646a8a38ea8b2bb5afb679a7464055e2, d7555984507822458b32a6405881038241d140be to before c70df6c17d389cc743f0eb30160e2d6bc6910db8, d7555984507822458b32a6405881038241d140be to before 542f45486f1ce2d2dde75bd85aca0389ef7046c3, d7555984507822458b32a6405881038241d140be to before f94c1a114ac209977bdf5ca841b98424295ab1f0
Linux

Linux · 5.14
Linux

RUGGEDCOM RST2428P · 0 to before V4.0
Siemens

Component: Not specified by the source
Function: devl_rate_nodes_destroy, rate
File: net/devlink/rate.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.