CVE-2025-71311: linux kernel from 6.11 (inclusive), before 6.12.75 (exclusive), from 6.13 (inclusive), before 6.18.14 (exclusive)…

Affected technology

linux kernel · from 6.11 (inclusive), before 6.12.75 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.14 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.4 (exclusive)
linux

Linux · 584f60ba22f79c89e6708ab82a5b5d9b8fa21fb2 to before dd6c81527d097b3b0bf5a15c2fdc9657d045144c, 584f60ba22f79c89e6708ab82a5b5d9b8fa21fb2 to before 5a30cc03bde169ad558695b26da6ea7e55f6194a, 584f60ba22f79c89e6708ab82a5b5d9b8fa21fb2 to before 41d79f8e2a36622d148719bf7c18b46ac1264284, 584f60ba22f79c89e6708ab82a5b5d9b8fa21fb2 to before f223ebffa185cc8da934333c5a31ff2d4f992dc9
Linux

Linux · 6.11
Linux

Component: Not specified by the source
File: fs/ntfs3/file.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.2/10) rates confidentiality impact as high; integrity impact as low; availability impact as none. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.