CVE-2025-27723

MediumCVSS 6.8/10Last modified Oct 14, 2026

Description

Use after free for some Linux kernel driver for the Intel(R) Ethernet 800 series before version 2.3.14 within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (high) impacts.

Metrics

CVSS 4.0 6.8/10CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness enumeration

CWE-416

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
May 12, 2026
Last modified
Oct 14, 2026
NVD status
Awaiting Analysis

Related CVEs from 2025

CVE-2025-277249.8A privilege escalation vulnerability exists in the login.php functionality of meddream MedDream PACS Premium 7.3.3.840. A specially crafted CVE-2025-277254.4Time-of-check time-of-use race condition for some ACAT before version 3.13 within Ring 3: User Applications may allow a denial of service. UCVE-2025-277262.1Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in the file download process of the USB storage CVE-2025-277277.8Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to elevate privileges locaCVE-2025-277287.8Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.CVE-2025-277297.8Use after free in Windows Shell allows an unauthorized attacker to execute code locally.CVE-2025-27737.2BEC Technologies Multiple Routers sys ping Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackersCVE-2025-277307.8Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.CVE-2025-277317.8Improper input validation in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.CVE-2025-277327.0Sensitive data storage in improperly locked memory in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.CVE-2025-277337.8Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.CVE-2025-277356.0Insufficient verification of data authenticity in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypas
CVE-2025-27723: Medium severity, CVSS 6.8 | Vulnix