Get real-time updates on Telegram
CVE-2025-71235: linux kernel from 4.8 (inclusive), before 5.10.251 (exclusive), from 5.11 (inclusive), before 5.15.201 (exclusive)…
CVE-2025-71235 affects azl3 kernel 6.6.121.1-1 on Azure Linux 3.0. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00109 (percentile 0.01151), scored 20-Oct-2026.
Affected technology
linux kernel · from 4.8 (inclusive), before 5.10.251 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.201 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.164 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.125 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.72 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.11 (exclusive)
linux
linux kernel · from 6.19 (inclusive), before 6.19.1 (exclusive)
linux
Linux · 783e0dc4f66ade6bbd8833b6bae778158d54c1a6 to before d8af012f92eee021c6ebb7093e65813c926c336b, 783e0dc4f66ade6bbd8833b6bae778158d54c1a6 to before 891f9969a29e9767a453cef4811c8d2472ccab49, 783e0dc4f66ade6bbd8833b6bae778158d54c1a6 to before 984dc1a51bf6fc3ca4e726abe790ec38952935d8, 783e0dc4f66ade6bbd8833b6bae778158d54c1a6 to before 528b2f1027edfb52af0171f0f4b227fb356dde05, 783e0dc4f66ade6bbd8833b6bae778158d54c1a6 to before d70f71d4c92bcb8b6a21ac62d4ea3e87721f4f32, 783e0dc4f66ade6bbd8833b6bae778158d54c1a6 to before c068ebbaf52820d6bdefb9b405a1e426663c635a, 783e0dc4f66ade6bbd8833b6bae778158d54c1a6 to before 7062eb0c488f35730334daad9495d9265c574853, 783e0dc4f66ade6bbd8833b6bae778158d54c1a6 to before 8890bf450e0b6b283f48ac619fca5ac2f14ddd62
Linux
Linux · 4.8
Linux
Component: Not specified by the source
File: drivers/scsi/qla2xxx/qla_os.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-362
- Product
- azl3 kernel 6.6.121.1-1 on Azure Linux 3.0
- CCR priority
- 22.0 /100 (P4)
- CVSS 3.1
- 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
- EPSS
- 0.00109 · percentile 0.01151 · 2026-10-20
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-20 16:56:29.772392+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-21 04:17:24.410927+00:00 UTC
- Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-19 19:46:42.191502+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-71235.html