Get real-time updates on Telegram
CVE-2025-39701: linux kernel from 5.17 (inclusive), before 6.1.149 (exclusive), from 6.2 (inclusive), before 6.6.103 (exclusive), from…
CVE-2025-39701. CVSS 3.1 base score 7.8 (HIGH, NVD). EPSS 0.00189 (percentile 0.08063), scored 19-Oct-2026.
Affected technology
linux kernel · from 5.17 (inclusive), before 6.1.149 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.44 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.16.4 (exclusive)
linux
linux kernel · 6.17 · update rc1
linux
linux kernel · 6.17 · update rc2
linux
debian linux · 11.0
debian
Linux · 0db89fa243e5edc5de38c88b369e4c3755c5fb74 to before 79300ff532bccbbf654992c7c0863b49a6c3973c, 0db89fa243e5edc5de38c88b369e4c3755c5fb74 to before cf0a88124e357bffda487cbf3cb612bb97eb97e4, 0db89fa243e5edc5de38c88b369e4c3755c5fb74 to before b00219888c11519ef75d988fa8a780da68ff568e, 0db89fa243e5edc5de38c88b369e4c3755c5fb74 to before 908094681f645d3a78e18ef90561a97029e2df7b, 0db89fa243e5edc5de38c88b369e4c3755c5fb74 to before 8151320c747efb22d30b035af989fed0d502176e
Linux
Linux · 5.17
Linux
SIMATIC CN 4100 · 0 to before V5.0
Siemens
Component: Not specified by the source
File: drivers/acpi/pfr_update.c, include/uapi/linux/pfrut.h
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 31.2 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · NVD
- EPSS
- 0.00189 · percentile 0.08063 · 2026-10-19
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-20 01:44:01.123206+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-39701.html