CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2025-39683: linux kernel from 4.4.269 (inclusive), before 4.5 (exclusive), from 4.9.269 (inclusive), before 4.10 (exclusive), from…

CVE-2025-39683. CVSS 3.1 base score 7.1 (HIGH, NVD). EPSS 0.00184 (percentile 0.07484), scored 14-Oct-2026.

Affected technology

linux kernel · from 4.4.269 (inclusive), before 4.5 (exclusive)
linux

linux kernel · from 4.9.269 (inclusive), before 4.10 (exclusive)
linux

linux kernel · from 4.14.233 (inclusive), before 4.15 (exclusive)
linux

linux kernel · from 4.19.191 (inclusive), before 4.20 (exclusive)
linux

linux kernel · from 5.4.118 (inclusive), before 5.5 (exclusive)
linux

linux kernel · from 5.10.36 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11.20 (inclusive), before 5.12 (exclusive)
linux

linux kernel · from 5.12.3 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.44 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.4 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

debian linux · 11.0
debian

Linux · 634684d79733124f7470b226b0f42aada4426b07 to before b842ef39c2ad6156c13afdec25ecc6792a9b67b9, 8c9af478c06bb1ab1422f90d8ecbc53defd44bc3 to before 41b838420457802f21918df66764b6fbf829d330, 8c9af478c06bb1ab1422f90d8ecbc53defd44bc3 to before 418b448e1d7470da9d4d4797f71782595ee69c49, 8c9af478c06bb1ab1422f90d8ecbc53defd44bc3 to before 58ff8064cb4c7eddac4da1a59da039ead586950a, 8c9af478c06bb1ab1422f90d8ecbc53defd44bc3 to before d0c68045b8b0f3737ed7bd6b8c83b7887014adee, 8c9af478c06bb1ab1422f90d8ecbc53defd44bc3 to before 3079517a5ba80901fe828a06998da64b9b8749be, 8c9af478c06bb1ab1422f90d8ecbc53defd44bc3 to before 6a909ea83f226803ea0e718f6e88613df9234d58, 24cd31752f47699b89b4b3471155c8e599a1a23a, e9cb474de7ff7a970c2a3951c12ec7e3113c0c35, 6ab671191f64b0da7d547e2ad4dc199ca7e5b558, 3d9281a4ac7171c808f9507f0937eb236b353905, 0b641b25870f02e2423e494365fc5243cc1e2759, ffd51dbfd2900e50c71b5c069fe407957e52d61f, cdd107d7f18158d966c2bc136204fe826dac445c, 5.10.36 to before 5.10.241, 4.4.269 to before 4.5, 4.9.269 to before 4.10, 4.14.233 to before 4.15, 4.19.191 to before 4.20, 5.4.118 to before 5.5, 5.11.20 to before 5.12, 5.12.3 to before 5.13
Linux

Linux · 5.13
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

Component: Not specified by the source
File: kernel/trace/trace.c, kernel/trace/trace.h

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-125
CCR priority
28.4 /100 (P4)
CVSS 3.1
7.1 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H · NVD
EPSS
0.00184 · percentile 0.07484 · 2026-10-14
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2025-39683.html