Get real-time updates on Telegram
CVE-2025-71161: linux kernel from 4.5 (inclusive), before 6.18.6 (exclusive); +4 more affected products
CVE-2025-71161. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00379 (percentile 0.30174), scored 14-Oct-2026.
Affected technology
linux kernel · from 4.5 (inclusive), before 6.18.6 (exclusive)
linux
Linux · a739ff3f543afbb4a041c16cd0182c8e8d366e70 to before 8b821ca892cfeeaf0bedc9fc72717294f67144d5, a739ff3f543afbb4a041c16cd0182c8e8d366e70 to before e227d2b229c7529bd98d348efc55262ccf24ab35, a739ff3f543afbb4a041c16cd0182c8e8d366e70 to before 897d9006e75f46f8bd7df78faa424327ae6a4bcf, a739ff3f543afbb4a041c16cd0182c8e8d366e70 to before 4220cb37406915c926c0e4a3dbab77cd9cceeb1e, a739ff3f543afbb4a041c16cd0182c8e8d366e70 to before 232948cf600fba69aff36b25d85ef91a73a35756, a739ff3f543afbb4a041c16cd0182c8e8d366e70 to before d9f3e47d3fae0c101d9094bc956ed24e7a0ee801
Linux
Linux · 4.5
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: drivers/md/dm-verity-fec.c, drivers/md/dm-verity-fec.h, drivers/md/dm-verity-target.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
The source reports that an attacker could disrupt service under the conditions described by the source. Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high.
- CWE
- CWE-193
- CCR priority
- 22.1 /100 (P4)
- CVSS 3.1
- 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
- EPSS
- 0.00379 · percentile 0.30174 · 2026-10-14
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-71161.html