Get real-time updates on Telegram
CVE-2025-71086: linux kernel 6.7; +4 more affected products
CVE-2025-71086. CVSS 3.1 base score 7.8 (HIGH, NVD). EPSS 0.00144 (percentile 0.03284), scored 14-Oct-2026.
Affected technology
linux kernel · from 4.19.304 (inclusive), before 4.20 (exclusive)
linux
linux kernel · from 5.4.266 (inclusive), before 5.5 (exclusive)
linux
linux kernel · from 5.10.206 (inclusive), before 5.10.248 (exclusive)
linux
linux kernel · from 5.15.146 (inclusive), before 5.15.198 (exclusive)
linux
linux kernel · from 6.1.70 (inclusive), before 6.1.160 (exclusive)
linux
linux kernel · from 6.6.9 (inclusive), before 6.6.120 (exclusive)
linux
linux kernel · from 6.7.1 (inclusive), before 6.12.64 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.4 (exclusive)
linux
linux kernel · 6.7
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
linux kernel · 6.19 · update rc8
linux
Linux · 12e5a4719c99d7f4104e7e962393dfb8baa1c591 to before 819fb41ae54960f66025802400c9d3935eef4042, c0e527c532a07556ca44642f5873b002c44da22c to before ed2639414d43ba037f798eaf619e878309310451, 3e0d1585799d8a991eba9678f297fd78d9f1846e to before 1418c12cd3bba79dc56b57b61c99efe40f579981, ffced26692f83212aa09d0ece0213b23cc2f611d to before 9f6185a32496834d6980b168cffcccc2d6b17280, 64b8bc7d5f1434c636a40bdcfcd42b278d1714be to before b409ba9e1e63ccf3ab4cc061e33c1f804183543e, 64b8bc7d5f1434c636a40bdcfcd42b278d1714be to before 92d900aac3a5721fb54f3328f1e089b44a861c38, 64b8bc7d5f1434c636a40bdcfcd42b278d1714be to before 6595beb40fb0ec47223d3f6058ee40354694c8e4, bd7de4734535140fda33240c2335a07fdab6f88e, b10265532df7bc3666bc53261b7f03f0fd14b1c9, 5.10.206 to before 5.10.248, 5.15.146 to before 5.15.198, 6.1.70 to before 6.1.160, 6.6.9 to before 6.6.120, 4.19.304 to before 4.20, 5.4.266 to before 5.5
Linux
Linux · 6.7
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: net/rose/af_rose.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-129
- CCR priority
- 31.2 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · NVD
- EPSS
- 0.00144 · percentile 0.03284 · 2026-10-14
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-71086.html