CYBER CODE RED

Get real-time updates on Telegram

P4

CVE-2025-39676: linux kernel 3.2; +3 more affected products

CVE-2025-39676. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00176 (percentile 0.06678), scored 19-Oct-2026.

Affected technology

linux kernel · from 3.2.1 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.44 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.4 (exclusive)
linux

linux kernel · 3.2
linux

linux kernel · 3.2 · update rc7
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

debian linux · 11.0
debian

Linux · 13483730a13bef372894aefcf73760f5c6c297be to before d0225f41ee70611ca88ccb22c8542ecdfa7faea8, 13483730a13bef372894aefcf73760f5c6c297be to before ad8a9d38d30c691a77c456e72b78f7932d4f234d, 13483730a13bef372894aefcf73760f5c6c297be to before 325bf7d57c4e2a341e381c5805e454fb69dd78c3, 13483730a13bef372894aefcf73760f5c6c297be to before 46288d12d1c30d08fbeffd05abc079f57a43a2d4, 13483730a13bef372894aefcf73760f5c6c297be to before f5ad0819f902b4b33591791b92a0350fb3692a6b, 13483730a13bef372894aefcf73760f5c6c297be to before f1424c830d6ce840341aac33fe99c8ac45447ac1, 13483730a13bef372894aefcf73760f5c6c297be to before f4bc3cdfe95115191e24592bbfc15f1d4a705a75, 13483730a13bef372894aefcf73760f5c6c297be to before 9dcf111dd3e7ed5fce82bb108e3a3fc001c07225
Linux

Linux · 3.2
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
Function: is
File: drivers/scsi/qla4xxx/ql4_os.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-476
CCR priority
22.0 /100 (P4)
CVSS 3.1
5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS
0.00176 · percentile 0.06678 · 2026-10-19
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2025-39676.html