SECUFOCUSNOW
Home›CVE index›CVE-2025-71123
Review reviewHigh

CVE-2025-71123

Linux Linux, SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP

In the Linux kernel, the following vulnerability has been resolved: ext4: fix string copying in parse_apply_sb_mount_options() strscpy_pad() can't be used to copy a non-NUL-term string into a NUL-term string of possibly bigger size. Commit 0efc5990bca5 ("string.h: Introduce memtostr() and memtostr_pad()") provides additional information in that regard. So if this happens, the following warning is observed: strnlen: detected buffer overflow: 65 byte read of buffer size 64 WARNING: CPU: 0 PID: 28655 at lib/string_helpers.c:1032 __fortify_report+0x96/0xc0 lib/string_helpers.c:1032 Modules link...

CVSS
7.8
EPSS
0.14%
4.02% percentile
CISA KEV
Not listed
Published
2026.01.15
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.14%
Technical severityCVSS 7.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: ext4: fix string copying in parse_apply_sb_mount_options() strscpy_pad() can't be used to copy a non-NUL-term string into a NUL-term string of possibly bigger size. Commit 0efc5990bca5 ("string.h: Introduce memtostr() and memtostr_pad()") provides additional information in that regard. So if this happens, the following warning is observed: strnlen: detected buffer overflow: 65 byte read of buffer size 64 WARNING: CPU: 0 PID: 28655 at lib/string_helpers.c:1032 __fortify_report+0x96/0xc0 lib/string_helpers.c:1032 Modules link...

Affected product and versions

Product
Linux Linux, SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
Affected versions
>= b2bac84fde28fb6a88817b8b761abda17a1d300b < 52ac96c4a2dd7bc47666000440b0602d9742e820, >= e651294218d2684302ee5ed95ccf381646f3e5b4 < 6e37143560e37869d51b7d9e0ac61fc48895f8a0, >= 01829af7656b56d83682b3491265d583d502e502 < 902ca2356f1e3ec5355c5808ad5d3f9d0095b0cc, >= 2a0cf438320cdb783e0378570744c0ef0d83e934 < db9ee13fab0267eccf6544ee35b16c9522db9aac, >= 8ecb790ea8c3fc69e77bace57f14cf0d7c177bd8 < 5bbacbbf1ca4419861dca3c6b82707c10e9c021c, >= 8ecb790ea8c3fc69e77bace57f14cf0d7c177bd8 < ee5a977b4e771cc181f39d504426dbd31ed701cc, >= 7bf46ff83a0ef11836e38ebd72cdc5107209342d, >= a6e94557cd05adc82fae0400f6e17745563e5412, >= 5.10.246 < 5.10.248, >= 6.1.158 < 6.1.160, >= 6.6.114 < 6.6.120, >= 6.12.54 < 6.12.64, >= 5.4.301 < 5.5, >= 6.17.4 < 6.18, >= 6.18, >= V3.1.6, >= 6.18.1 < 6.18.3, 6.18, 6.19
Fixed versions
5.5, 5.10.248, 6.1.160, 6.6.120, 6.12.64, 6.18, 6.18.3

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
Not available