A vulnerability classified as critical has been found in Linux Kernel up to 6.18.15/6.19.5. Impacted is the function drm_gem_shmem_purge_locked. The manipulation leads to privilege escalation. This vulnerability is documented as CVE-2025-71296. The attack requires being on the local network.
| Vendor | Product | Versions |
|---|---|---|
| linux | linux kernel | 954907f7147dc43e0d1cd4d430c21d143d5fdf55, 954907f7147dc43e0d1cd4d430c21d143d5fdf55, 954907f7147dc43e0d1cd4d430c21d143d5fdf55, 6.16, 6.18.16, 6.19.6, 7.0, 6.18.15, 6.19.5 |
Downstream vendors/products affected by this vulnerability
| Vendor | Product | Source | Confidence |
|---|---|---|---|
| open source | open source linux kernel | cert_advisory | 90% |
Updated severity to CRITICAL, added affected versions 6.18.15 and 6.19.5, and provided a new description detailing the privilege escalation vulnerability.
Updated description with more technical detail, added affected versions 6.18.16, 6.19.6, and 7.0, and changed severity to HIGH while marking the vulnerability as actively exploited.
Initial creation
