CVE-2025-71238: linux kernel from 5.7 (inclusive), before 5.10.251 (exclusive), from 5.11 (inclusive), before 5.15.201 (exclusive)…

Affected technology

linux kernel · from 5.7 (inclusive), before 5.10.251 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.201 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.164 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.127 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.74 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.13 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.3 (exclusive)
linux

Linux · 1b81e7f3019d632a707e07927e946ffbbc102910 to before 057a5bdc481e58ab853117254867ffb22caf9f6e, 1b81e7f3019d632a707e07927e946ffbbc102910 to before f2bbb4db0e4a4fbd5e649c0b5d8733f61da24720, 1b81e7f3019d632a707e07927e946ffbbc102910 to before 27ac9679c43a09e54e2d9aae9980ada045b428e0, 1b81e7f3019d632a707e07927e946ffbbc102910 to before 74e7458537cd9349cf019862e51491f670871707, 1b81e7f3019d632a707e07927e946ffbbc102910 to before 871f6236da96c4a9712b8a29d7f555f767a47e95, 1b81e7f3019d632a707e07927e946ffbbc102910 to before 31f33b856d2324d86bcaef295f4d210477a1c018, 1b81e7f3019d632a707e07927e946ffbbc102910 to before 708003e1bc857dd014d4c44278d7d77c26f91b1c, 1b81e7f3019d632a707e07927e946ffbbc102910 to before c2c68225b1456f4d0d393b5a8778d51bb0d5b1d0
Linux

Linux · 5.7
Linux

Component: Not specified by the source
File: drivers/scsi/qla2xxx/qla_bsg.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.