CYBER CODE RED

Get real-time updates on Telegram

P4

CVE-2025-71094: linux kernel 5.14; +1 more affected products

CVE-2025-71094. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00137 (percentile 0.02763), scored 19-Oct-2026.

Affected technology

linux kernel · from 5.13.13 (inclusive), before 5.14 (exclusive)
linux

linux kernel · from 5.14.1 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.4 (exclusive)
linux

linux kernel · 5.14
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 7e88b11a862afe59ee0c365123ea5fb96a26cb3b to before fc96018f09f8d30586ca6582c5045a84eafef146, 7e88b11a862afe59ee0c365123ea5fb96a26cb3b to before f5f4f30f3811d37e1aa48667c36add74e5a8d99f, 7e88b11a862afe59ee0c365123ea5fb96a26cb3b to before 38722e69ee64dbb020028c93898d25d6f4c0e0b2, 7e88b11a862afe59ee0c365123ea5fb96a26cb3b to before 98a12c2547a44a5f03f35c108d2022cc652cbc4d, 7e88b11a862afe59ee0c365123ea5fb96a26cb3b to before bf8a0f3b787ca7c5889bfca12c60c483041fbee3, 7e88b11a862afe59ee0c365123ea5fb96a26cb3b to before a1e077a3f76eea0dc671ed6792e7d543946227e8, 4e4f3cb41d687bd64cd03358862b23c84d82329e, 5.13.13 to before 5.14
Linux

Linux · 5.14
Linux

Component: Not specified by the source
File: drivers/net/usb/asix_common.c, drivers/net/usb/ax88172a.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-20
CCR priority
22.0 /100 (P4)
CVSS 3.1
5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS
0.00137 · percentile 0.02763 · 2026-10-19
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2025-71094.html