CVE-2025-32060
Awaiting Analysis Awaiting Analysis - Queue

BaseFortify

Publication date: 2026-02-15

Last updated on: 2026-02-18

Assigner: Automotive Security Research Group (ASRG)

Description
The system suffers from the absence of a kernel module signature verification. If an attacker can execute commands on behalf of root user (due to additional vulnerabilities), then he/she is also able to load custom kernel modules to the kernel space and execute code in the kernel context. Such a flaw can lead to taking control over the entire system. First identified on Nissan Leaf ZE1 manufactured in 2020.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-02-15
Last Modified
2026-02-18
Generated
2026-07-06
AI Q&A
2026-02-15
EPSS Evaluated
2026-07-05
NVD
CVE-2025-32060
EUVD
EUVD-2025-206906

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-347 The product does not verify, or incorrectly verifies, the cryptographic signature for data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

I don't know

Executive Summary

This vulnerability is due to the absence of kernel module signature verification in the system. This means that the system does not check whether kernel modules are properly signed before loading them.

If an attacker already has the ability to execute commands as the root user (possibly through other vulnerabilities), they can exploit this flaw to load custom, potentially malicious kernel modules into the kernel space.

Loading such modules allows the attacker to execute code with kernel-level privileges, effectively gaining control over the entire system.

Impact Analysis

This vulnerability can have severe impacts because it allows an attacker with root access to escalate their privileges further by loading arbitrary kernel modules.

By executing code in the kernel context, the attacker can take full control of the system, potentially bypassing security mechanisms, accessing sensitive data, and disrupting system operations.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-32060. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart