Get real-time updates on Telegram
CVE-2025-71126: linux kernel 6.16; +1 more affected products
CVE-2025-71126. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00265 (percentile 0.17172), scored 15-Oct-2026.
Affected technology
linux kernel · from 6.1.149 (inclusive), before 6.1.160 (exclusive)
linux
linux kernel · from 6.6.101 (inclusive), before 6.6.120 (exclusive)
linux
linux kernel · from 6.12.40 (inclusive), before 6.12.64 (exclusive)
linux
linux kernel · from 6.15.8 (inclusive), before 6.16 (exclusive)
linux
linux kernel · from 6.16.1 (inclusive), before 6.18.3 (exclusive)
linux
linux kernel · 6.16
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
linux kernel · 6.19 · update rc8
linux
Linux · 5586518bec27666c747cd52aabb62d485686d0bf to before 0107442e82c0f8d6010e07e6030741c59c520d6e, 75a4c9ab8a7af0d76b31ccd1188ed178c38b35d2 to before 252892d5a6a2f163ce18f32716e46fa4da7d4e79, 54999dea879fecb761225e28f274b40662918c30 to before 0ca9fb4335e726dab4f23b3bfe87271d8f005f41, f8a1d9b18c5efc76784f5a326e905f641f839894 to before 50f47c02be419bf0a3ae94c118addf67beef359f, f8a1d9b18c5efc76784f5a326e905f641f839894 to before ffb8c27b0539dd90262d1021488e7817fae57c42, 1d82a8fe6ee4afdc92f4e8808c9dad2a6095bbc5, 6.1.149 to before 6.1.160, 6.6.101 to before 6.6.120, 6.12.40 to before 6.12.64, 6.15.8 to before 6.16
Linux
Linux · 6.16
Linux
Component: Not specified by the source
File: net/mptcp/protocol.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-667
- CCR priority
- 22.1 /100 (P4)
- CVSS 3.1
- 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
- EPSS
- 0.00265 · percentile 0.17172 · 2026-10-15
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-16 16:12:45.293412+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-71126.html