Get real-time updates on Telegram
CVE-2025-71120: linux kernel 5.5; +4 more affected products
CVE-2025-71120. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00495 (percentile 0.40955), scored 14-Oct-2026.
Affected technology
linux kernel · from 4.19.99 (inclusive), before 4.20 (exclusive)
linux
linux kernel · from 5.4.15 (inclusive), before 5.5 (exclusive)
linux
linux kernel · from 5.5.1 (inclusive), before 5.10.248 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.3 (exclusive)
linux
linux kernel · 5.5
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
linux kernel · 6.19 · update rc8
linux
Linux · 5866efa8cbfbadf3905072798e96652faf02dbe8 to before a8f1e445ce3545c90d69c9e8ff8f7821825fe810, 5866efa8cbfbadf3905072798e96652faf02dbe8 to before 4dedb6a11243a5c9eb9dbb97bca3c98bd725e83d, 5866efa8cbfbadf3905072798e96652faf02dbe8 to before f9e53f69ac3bc4ef568b08d3542edac02e83fefd, 5866efa8cbfbadf3905072798e96652faf02dbe8 to before 7452d53f293379e2c38cfa8ad0694aa46fc4788b, 5866efa8cbfbadf3905072798e96652faf02dbe8 to before a2c6f25ab98b423f99ccd94874d655b8bcb01a19, 5866efa8cbfbadf3905072798e96652faf02dbe8 to before 1c8bb965e9b0559ff0f5690615a527c30f651dd8, 5866efa8cbfbadf3905072798e96652faf02dbe8 to before d4b69a6186b215d2dc1ebcab965ed88e8d41768d, 66ed7b413d31c6ff23901ac4443b1cc1af2f6113, 7be8c165dc81564705e8e0b72d398ef708f67eaa, 4.19.99 to before 4.20, 5.4.15 to before 5.5
Linux
Linux · 5.5
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: net/sunrpc/auth_gss/svcauth_gss.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-476
- CCR priority
- 22.1 /100 (P4)
- CVSS 3.1
- 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
- EPSS
- 0.00495 · percentile 0.40955 · 2026-10-14
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-71120.html