CYBER CODE RED

Get real-time updates on Telegram

P4

CVE-2025-71154: linux kernel 3.10; +1 more affected products

CVE-2025-71154. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00137 (percentile 0.02763), scored 19-Oct-2026.

Affected technology

linux kernel · from 3.10.1 (inclusive), before 5.10.248 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.160 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.120 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.64 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.4 (exclusive)
linux

linux kernel · 3.10
linux

linux kernel · 3.10 · update rc3
linux

linux kernel · 3.10 · update rc4
linux

linux kernel · 3.10 · update rc5
linux

linux kernel · 3.10 · update rc6
linux

linux kernel · 3.10 · update rc7
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

Linux · 4d12997a9bb3d217ad4b925ec3074ec89364bf95 to before a4e2442d3c48355a84463342f397134f149936d7, 4d12997a9bb3d217ad4b925ec3074ec89364bf95 to before 2f966186b99550e3c665dbfb87b8314e30acea02, 4d12997a9bb3d217ad4b925ec3074ec89364bf95 to before db2244c580540306d60ce783ed340190720cd429, 4d12997a9bb3d217ad4b925ec3074ec89364bf95 to before 4bd4ea3eb326608ffc296db12c105f92dc2f2190, 4d12997a9bb3d217ad4b925ec3074ec89364bf95 to before 6492ad6439ff1a479fc94dc6052df3628faed8b6, 4d12997a9bb3d217ad4b925ec3074ec89364bf95 to before 151403e903840c9cf06754097b6732c14f26c532, 4d12997a9bb3d217ad4b925ec3074ec89364bf95 to before 12cab1191d9890097171156d06bfa8d31f1e39c8
Linux

Linux · 3.10
Linux

Component: Not specified by the source
File: drivers/net/usb/rtl8150.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-401
CCR priority
22.0 /100 (P4)
CVSS 3.1
5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS
0.00137 · percentile 0.02763 · 2026-10-19
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2025-71154.html