CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2025-71183: linux kernel 4.6; +1 more affected products

CVE-2025-71183. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.0041 (percentile 0.33632), scored 15-Oct-2026.

Affected technology

linux kernel · from 3.18.32 (inclusive), before 3.19 (exclusive)
linux

linux kernel · from 4.1.23 (inclusive), before 4.2 (exclusive)
linux

linux kernel · from 4.4.8 (inclusive), before 4.5 (exclusive)
linux

linux kernel · from 4.5.2 (inclusive), before 4.6 (exclusive)
linux

linux kernel · from 4.6.1 (inclusive), before 6.1.161 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.121 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.66 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.6 (exclusive)
linux

linux kernel · 4.6
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 56f23fdbb600e6087db7b009775b95ce07cc3195 to before c7f0207db68d5a1b4af23acbef1a8e8ddc431ebb, 56f23fdbb600e6087db7b009775b95ce07cc3195 to before a63998cd6687c14b160dccb0bbcf281b2eb0dab3, 56f23fdbb600e6087db7b009775b95ce07cc3195 to before 0c2413c69129f6ce60157f7b53d9ba880260400b, 56f23fdbb600e6087db7b009775b95ce07cc3195 to before d52af58dd463821c5c516aebb031a58934f696ea, 56f23fdbb600e6087db7b009775b95ce07cc3195 to before 7ba0b6461bc4edb3005ea6e00cdae189bcf908a5, 048605483fbdd1e77ead32a7cd7b95cc17eaaf0e, 033ad030df0ea932a21499582fea59e1df95769b, 1653a3b0e9436c10eb307c318776cf91fe18ff08, ff440e9185e96cbb94481fc8b6192b944dcfc061, 3.18.32 to before 3.19, 4.1.23 to before 4.2, 4.4.8 to before 4.5, 4.5.2 to before 4.6
Linux

Linux · 4.6
Linux

Component: Not specified by the source
File: fs/btrfs/tree-log.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.1/10) rates confidentiality impact as none; integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CCR priority
22.1 /100 (P4)
CVSS 3.1
5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS
0.0041 · percentile 0.33632 · 2026-10-15
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2025-71183.html