CVE-2025-39697: linux kernel from 4.14 (inclusive), before 5.10.242 (exclusive), from 5.11 (inclusive), before 5.15.191 (exclusive)…

Affected technology

linux kernel · from 4.14 (inclusive), before 5.10.242 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.191 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.150 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.104 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.44 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.4 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

debian linux · 11.0
debian

Linux · bd37d6fce184836bd5e7cd90ce40116a4fadaf2a to before 0ff42a32784e0f2cb46a46da8e9f473538c13e1b, bd37d6fce184836bd5e7cd90ce40116a4fadaf2a to before f230d40147cc37eb3aef4d50e2e2c06ea73d9a77, bd37d6fce184836bd5e7cd90ce40116a4fadaf2a to before c32e3c71aaa1c1ba05da88605e2ddd493c58794f, bd37d6fce184836bd5e7cd90ce40116a4fadaf2a to before 181feb41f0b268e6288bf9a7b984624d7fe2031d, bd37d6fce184836bd5e7cd90ce40116a4fadaf2a to before 92278ae36935a54e65fef9f8ea8efe7e80481ace, bd37d6fce184836bd5e7cd90ce40116a4fadaf2a to before 202a3432d21ac060629a760fff3b0a39859da3ea, bd37d6fce184836bd5e7cd90ce40116a4fadaf2a to before 76d2e3890fb169168c73f2e4f8375c7cc24a765e
Linux

Linux · 4.14
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

Component: Not specified by the source
File: fs/nfs/pagelist.c, fs/nfs/write.c, include/linux/nfs_page.h

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.