CVE-2025-71274: linux kernel from 4.18 (inclusive), before 5.10.252 (exclusive), from 5.11 (inclusive), before 5.15.202 (exclusive)…

Affected technology

linux kernel · from 4.18 (inclusive), before 5.10.252 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.202 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.165 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.128 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.75 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.16 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.6 (exclusive)
linux

Linux · 39e47767ec9b22f844c2a07c9d329256960d4021 to before 392c6b68334aa0e0ae9aba95c0a366bcb0d92f5d, 39e47767ec9b22f844c2a07c9d329256960d4021 to before d66b8074c555e8abb0ae19eea1c9f3635498bdde, 39e47767ec9b22f844c2a07c9d329256960d4021 to before 47615557447185917afa432b7958f87583c417cb, 39e47767ec9b22f844c2a07c9d329256960d4021 to before 90c8353f471821d7ccd4fe573a2402e056192494, 39e47767ec9b22f844c2a07c9d329256960d4021 to before 7654e6e3cd6bdee9602f6063b3c670bd556d7e61, 39e47767ec9b22f844c2a07c9d329256960d4021 to before 2e4a70f3c30910427e5ea848b799066d67b963d5, 39e47767ec9b22f844c2a07c9d329256960d4021 to before 954557957177c3c13d7c655976665b1170da5e50, 39e47767ec9b22f844c2a07c9d329256960d4021 to before 42023d4b6d2661a40ee2dcf7e1a3528a35c638ca
Linux

Linux · 4.18
Linux

Component: Not specified by the source
Function: reads, modifies, while
File: drivers/rpmsg/rpmsg_core.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.