Get real-time updates on Telegram
CVE-2025-71267: linux kernel from 5.15 (inclusive), before 5.15.202 (exclusive), from 5.16 (inclusive), before 6.1.165 (exclusive)…
CVE-2025-71267 affects azl3 kernel 6.6.126.1-1 on Azure Linux 3.0. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00121 (percentile 0.01761), scored 14-Oct-2026.
Affected technology
linux kernel · from 5.15 (inclusive), before 5.15.202 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.165 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.128 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.75 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.16 (exclusive)
linux
linux kernel · from 6.19 (inclusive), before 6.19.6 (exclusive)
linux
Linux · be71b5cba2e6485e8959da7a9f9a44461a1bb074 to before 9267d99fade76d44d4a133599524031fe684156e, be71b5cba2e6485e8959da7a9f9a44461a1bb074 to before 976e6a7c51fabf150478decbe8ef5d9a26039b7c, be71b5cba2e6485e8959da7a9f9a44461a1bb074 to before 8d8c70b57dbeda3eb165c0940b97e85373ca9354, be71b5cba2e6485e8959da7a9f9a44461a1bb074 to before 7ef219656febf5ae06ae56b1fce47ebd05f92b68, be71b5cba2e6485e8959da7a9f9a44461a1bb074 to before 9779a6eaaabdf47aa57910d352b398ad742e6a5f, be71b5cba2e6485e8959da7a9f9a44461a1bb074 to before fd508939dbca5eceefb2d0c2564beb15469572f2, be71b5cba2e6485e8959da7a9f9a44461a1bb074 to before 06909b2549d631a47fcda249d34be26f7ca1711d
Linux
Linux · 5.15
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
Function: returns
File: fs/ntfs3/attrlist.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
The source reports that an attacker could disrupt service under the conditions described by the source. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high.
- CWE
- CWE-835
- Product
- azl3 kernel 6.6.126.1-1 on Azure Linux 3.0
- CCR priority
- 22.0 /100 (P4)
- CVSS 3.1
- 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
- EPSS
- 0.00121 · percentile 0.01761 · 2026-10-14
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
- Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-71267.html