CYBER CODE RED

Get real-time updates on Telegram

P4

CVE-2025-71084: linux kernel 5.12; +1 more affected products

CVE-2025-71084. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00137 (percentile 0.02763), scored 19-Oct-2026.

Affected technology

linux kernel · from 5.10.20 (inclusive), before 5.10.248 (exclusive)
linux

linux kernel · from 5.11.3 (inclusive), before 5.12 (exclusive)
linux

linux kernel · from 5.12.1 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.4 (exclusive)
linux

linux kernel · 5.12
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 60d613b39e8d0c9f3b526e9c96445422b4562d76 to before d5ce588a9552878859a4d44b70b724216c188a5f, fe454dc31e84f8c14cb8942fcb61666c9f40745b to before abf38398724ecc888f62c678d288da40d11878af, fe454dc31e84f8c14cb8942fcb61666c9f40745b to before ab668a58c4a2ccb6d54add7a76f2f955d15d0196, fe454dc31e84f8c14cb8942fcb61666c9f40745b to before c0acdee513239e1d6e1b490f56be0e6837dfd162, fe454dc31e84f8c14cb8942fcb61666c9f40745b to before 5cb34bb5fd726491b809efbeb5cfd63ae5bf9cf3, fe454dc31e84f8c14cb8942fcb61666c9f40745b to before 3ba6d01c4b3c584264dc733c6a2ecc5bbc8e0bb5, fe454dc31e84f8c14cb8942fcb61666c9f40745b to before 57f3cb6c84159d12ba343574df2115fb18dd83ca, a3262b3884dd67b4c5632ce7cdf9cff9d1a575d4, 5.10.20 to before 5.10.248, 5.11.3 to before 5.12
Linux

Linux · 5.12
Linux

Component: Not specified by the source
File: drivers/infiniband/core/cma.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-401
CCR priority
22.0 /100 (P4)
CVSS 3.1
5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS
0.00137 · percentile 0.02763 · 2026-10-19
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2025-71084.html