CVE-2025-71286: linux kernel from 6.4 (inclusive), before 6.6.128 (exclusive), from 6.7 (inclusive), before 6.12.75 (exclusive), from…

Affected technology

linux kernel · from 6.4 (inclusive), before 6.6.128 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.75 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.16 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.6 (exclusive)
linux

Linux · a382082ff74b036944cbc5b6ad29b65f633acd3a to before 59fe643f21b9d59bcbedb0dfbf988ee455c23736, a382082ff74b036944cbc5b6ad29b65f633acd3a to before 491956b45b5f4933632ea6d8a8bdfdf045ab81e1, a382082ff74b036944cbc5b6ad29b65f633acd3a to before a704a1a4394b5877b9adc31b2c3165ad0b541896, a382082ff74b036944cbc5b6ad29b65f633acd3a to before 1237cd9ff198cb882402572f29569e5247190974, a382082ff74b036944cbc5b6ad29b65f633acd3a to before a653820700b81c9e6f05ac23b7969ecec1a18e85
Linux

Linux · 6.4
Linux

Component: Not specified by the source
Function: to
File: sound/soc/sof/ipc4-topology.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.