CVE-2025-39702: linux kernel from 4.10 (inclusive), before 5.15.190 (exclusive), from 5.16 (inclusive), before 6.1.149 (exclusive)…

Affected technology

linux kernel · from 4.10 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.44 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.4 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

debian linux · 11.0
debian

Linux · bf355b8d2c30a289232042cacc1cfaea4923936c to before ff55a452d56490047f5233cc48c5d933f8586884, bf355b8d2c30a289232042cacc1cfaea4923936c to before 3b348c9c8d2ca2c67559ffd0e258ae7e1107d4f0, bf355b8d2c30a289232042cacc1cfaea4923936c to before 86b6d34717fe0570afce07ee79b8eeb40341f831, bf355b8d2c30a289232042cacc1cfaea4923936c to before 3ddd55cf19ed6cc62def5e3af10c2a9df1b861c3, bf355b8d2c30a289232042cacc1cfaea4923936c to before b3967c493799e63f648e9c7b6cb063aa2aed04e7, bf355b8d2c30a289232042cacc1cfaea4923936c to before f7878d47560d61e3f370aca3cebb8f42a55b990a, bf355b8d2c30a289232042cacc1cfaea4923936c to before a458b2902115b26a25d67393b12ddd57d1216aaa
Linux

Linux · 4.10
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
Function: for
File: net/ipv6/seg6_hmac.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.