Get real-time updates on Telegram
CVE-2025-39676: linux kernel 3.2; +3 more affected products
CVE-2025-39676. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00176 (percentile 0.06678), scored 19-Oct-2026.
Affected technology
linux kernel · from 3.2.1 (inclusive), before 5.4.297 (exclusive)
linux
linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.44 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.16.4 (exclusive)
linux
linux kernel · 3.2
linux
linux kernel · 3.2 · update rc7
linux
linux kernel · 6.17 · update rc1
linux
linux kernel · 6.17 · update rc2
linux
debian linux · 11.0
debian
Linux · 13483730a13bef372894aefcf73760f5c6c297be to before d0225f41ee70611ca88ccb22c8542ecdfa7faea8, 13483730a13bef372894aefcf73760f5c6c297be to before ad8a9d38d30c691a77c456e72b78f7932d4f234d, 13483730a13bef372894aefcf73760f5c6c297be to before 325bf7d57c4e2a341e381c5805e454fb69dd78c3, 13483730a13bef372894aefcf73760f5c6c297be to before 46288d12d1c30d08fbeffd05abc079f57a43a2d4, 13483730a13bef372894aefcf73760f5c6c297be to before f5ad0819f902b4b33591791b92a0350fb3692a6b, 13483730a13bef372894aefcf73760f5c6c297be to before f1424c830d6ce840341aac33fe99c8ac45447ac1, 13483730a13bef372894aefcf73760f5c6c297be to before f4bc3cdfe95115191e24592bbfc15f1d4a705a75, 13483730a13bef372894aefcf73760f5c6c297be to before 9dcf111dd3e7ed5fce82bb108e3a3fc001c07225
Linux
Linux · 3.2
Linux
SIMATIC CN 4100 · 0 to before V5.0
Siemens
Component: Not specified by the source
Function: is
File: drivers/scsi/qla4xxx/ql4_os.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-476
- CCR priority
- 22.0 /100 (P4)
- CVSS 3.1
- 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
- EPSS
- 0.00176 · percentile 0.06678 · 2026-10-19
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-20 01:44:01.123206+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-39676.html