Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2025-71085

In the Linux kernel, the following vulnerability has been resolved: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() There exists a kernel oops caused by a BUG_ON(nhead < 0) at net/core/skbuff.c:2232 in pskb_expand_head(). This bug is triggered as part of the calipso_skbuff_setattr() routine when skb_cow() is passed headroom > INT_MAX (i.e. (int)(skb_headroom(skb) + len_delta) < 0). The root cause of the bug is due to an implicit integer cast in __skb_cow(). The check (he
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:58bfd0ddb06d3628926b0e871a82e0d156990b1116bb90fdbdca3fa643d8bef0
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 7 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["net/ipv6/calipso.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.8"},{"lessThan":"4.8","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.248","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.198","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.160","versionType":"semver"},{"lessThanOrEq…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9ce94f653d43ef9410f4c17ffeab2e9c2966f3da5700891b9eea3b6c22431dc2 · sha256:077916160e94ac08… · /containers/cna/affected/1

{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9ce94f653d43ef9410f4c17ffeab2e9c2966f3da5700891b9eea3b6c22431dc2 · sha256:077916160e94ac08… · /containers/adp/1/affected/0

{"defaultStatus":"unknown","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9ce94f653d43ef9410f4c17ffeab2e9c2966f3da5700891b9eea3b6c22431dc2 · sha256:077916160e94ac08… · /containers/adp/1/affected/4

{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9ce94f653d43ef9410f4c17ffeab2e9c2966f3da5700891b9eea3b6c22431dc2 · sha256:077916160e94ac08… · /containers/adp/1/affected/2

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/ipv6/calipso.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"86f365897068d09418488165a68b23cb5baa37f2","status":"affected","version":"2917f57b6bc15cc6787496ee5f2fdf17f0e9b7d3","versionType":"git"},{"lessThan":"6b7522424529556c9cbc15e15e7bd4eeae310910","status":"affected","version":"2917f57b6bc15cc6787496ee5f2fdf17f0e9b7d3","versionType":"git"},{"lessThan":"2bb759062efa188ea5d07242a43e5aa5464bbae1","status":"affected","version":"2917f57b6bc15cc6787496ee5f2…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9ce94f653d43ef9410f4c17ffeab2e9c2966f3da5700891b9eea3b6c22431dc2 · sha256:077916160e94ac08… · /containers/cna/affected/0

{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9ce94f653d43ef9410f4c17ffeab2e9c2966f3da5700891b9eea3b6c22431dc2 · sha256:077916160e94ac08… · /containers/adp/1/affected/3

{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9ce94f653d43ef9410f4c17ffeab2e9c2966f3da5700891b9eea3b6c22431dc2 · sha256:077916160e94ac08… · /containers/adp/1/affected/1

Affected products and versions

7 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["net/ipv6/calipso.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.8"},{"lessThan":"4.8","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.248","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.198","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.160","versionType":"semver"},{"lessThanOrEq…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9ce94f653d43ef9410f4c17ffeab2e9c2966f3da5700891b9eea3b6c22431dc2 · sha256:077916160e94ac08… · /containers/cna/affected/1
{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9ce94f653d43ef9410f4c17ffeab2e9c2966f3da5700891b9eea3b6c22431dc2 · sha256:077916160e94ac08… · /containers/adp/1/affected/0
{"defaultStatus":"unknown","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9ce94f653d43ef9410f4c17ffeab2e9c2966f3da5700891b9eea3b6c22431dc2 · sha256:077916160e94ac08… · /containers/adp/1/affected/4
{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9ce94f653d43ef9410f4c17ffeab2e9c2966f3da5700891b9eea3b6c22431dc2 · sha256:077916160e94ac08… · /containers/adp/1/affected/2
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/ipv6/calipso.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"86f365897068d09418488165a68b23cb5baa37f2","status":"affected","version":"2917f57b6bc15cc6787496ee5f2fdf17f0e9b7d3","versionType":"git"},{"lessThan":"6b7522424529556c9cbc15e15e7bd4eeae310910","status":"affected","version":"2917f57b6bc15cc6787496ee5f2fdf17f0e9b7d3","versionType":"git"},{"lessThan":"2bb759062efa188ea5d07242a43e5aa5464bbae1","status":"affected","version":"2917f57b6bc15cc6787496ee5f2…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9ce94f653d43ef9410f4c17ffeab2e9c2966f3da5700891b9eea3b6c22431dc2 · sha256:077916160e94ac08… · /containers/cna/affected/0
{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9ce94f653d43ef9410f4c17ffeab2e9c2966f3da5700891b9eea3b6c22431dc2 · sha256:077916160e94ac08… · /containers/adp/1/affected/3
{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9ce94f653d43ef9410f4c17ffeab2e9c2966f3da5700891b9eea3b6c22431dc2 · sha256:077916160e94ac08… · /containers/adp/1/affected/1

Provider-owned CVSS observations

1 source assertion
{"metric":{"baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:9ce94f653d43ef9410f4c17ffeab2e9c2966f3da5700891b9eea3b6c22431dc2 · sha256:077916160e94ac08… · /containers/cna/metrics/0/cvssV3_1

Source references

8 source assertions
{"url":"https://cert-portal.siemens.com/productcert/html/ssa-019113.html"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9ce94f653d43ef9410f4c17ffeab2e9c2966f3da5700891b9eea3b6c22431dc2 · sha256:077916160e94ac08… · /containers/adp/1/references/0
{"url":"https://git.kernel.org/stable/c/2bb759062efa188ea5d07242a43e5aa5464bbae1"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9ce94f653d43ef9410f4c17ffeab2e9c2966f3da5700891b9eea3b6c22431dc2 · sha256:077916160e94ac08… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/58fc7342b529803d3c221101102fe913df7adb83"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9ce94f653d43ef9410f4c17ffeab2e9c2966f3da5700891b9eea3b6c22431dc2 · sha256:077916160e94ac08… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/6b7522424529556c9cbc15e15e7bd4eeae310910"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9ce94f653d43ef9410f4c17ffeab2e9c2966f3da5700891b9eea3b6c22431dc2 · sha256:077916160e94ac08… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/73744ad5696dce0e0f43872aba8de6a83d6ad570"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9ce94f653d43ef9410f4c17ffeab2e9c2966f3da5700891b9eea3b6c22431dc2 · sha256:077916160e94ac08… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/86f365897068d09418488165a68b23cb5baa37f2"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9ce94f653d43ef9410f4c17ffeab2e9c2966f3da5700891b9eea3b6c22431dc2 · sha256:077916160e94ac08… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/bf3709738d8a8cc6fa275773170c5c29511a0b24"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9ce94f653d43ef9410f4c17ffeab2e9c2966f3da5700891b9eea3b6c22431dc2 · sha256:077916160e94ac08… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/c53aa6a5086f03f19564096ee084a202a8c738c0"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9ce94f653d43ef9410f4c17ffeab2e9c2966f3da5700891b9eea3b6c22431dc2 · sha256:077916160e94ac08… · /containers/cna/references/3

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer