CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2025-71266: linux kernel 5.15; +4 more affected products

CVE-2025-71266 affects azl3 kernel 6.6.126.1-1 on Azure Linux 3.0. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00121 (percentile 0.01761), scored 14-Oct-2026.

Affected technology

linux kernel · from 5.15.1 (inclusive), before 5.15.202 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.165 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.128 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.75 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.16 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.6 (exclusive)
linux

linux kernel · 5.15
linux

Linux · 82cae269cfa953032fbb8980a7d554d60fb00b17 to before 14c3188afbedfd5178bbabb8002487ea14b37b56, 82cae269cfa953032fbb8980a7d554d60fb00b17 to before 435d34719db0e130f6f0c621d67ed524cc1a7d10, 82cae269cfa953032fbb8980a7d554d60fb00b17 to before 68e32694be231c1cdb99b7637a657314e88e1a96, 82cae269cfa953032fbb8980a7d554d60fb00b17 to before 398e768d1accd1f5645492ab996005d7aa84a5b0, 82cae269cfa953032fbb8980a7d554d60fb00b17 to before b0ea441f44ce64fa514a415d4a9e6e2b06e7946c, 82cae269cfa953032fbb8980a7d554d60fb00b17 to before 0ad7a1be44479503dbe5c699759861ef5b8bd70c, 82cae269cfa953032fbb8980a7d554d60fb00b17 to before 1732053c8a6b360e2d5afb1b34fe9779398b072c
Linux

Linux · 5.15
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
Function: to, checks
File: fs/ntfs3/index.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

The source reports that an attacker could disrupt service under the conditions described by the source. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high.

Published

CWE
CWE-835
Product
azl3 kernel 6.6.126.1-1 on Azure Linux 3.0
CCR priority
22.0 /100 (P4)
CVSS 3.1
5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS
0.00121 · percentile 0.01761 · 2026-10-14
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2025-71266.html