CVE-2025-39703: linux kernel 5.13; +3 more affected products

Affected technology

linux kernel · from 5.10.42 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.12.9 (inclusive), before 5.13 (exclusive)
linux

linux kernel · from 5.13.1 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.44 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.4 (exclusive)
linux

linux kernel · 5.13
linux

linux kernel · 5.13 · update rc4
linux

linux kernel · 5.13 · update rc5
linux

linux kernel · 5.13 · update rc6
linux

linux kernel · 5.13 · update rc7
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

debian linux · 11.0
debian

Linux · f6442ee08fe66c8e45c4f246531a2aaf4f17a7a7 to before 8d9bc4a375a1ba05f7dfa0407de8e510ab9bd14d, 48b491a5cc74333c4a6a82fe21cea42c055a3b0b to before 3ae272ab523dd6bdc26e879027ed79feac9dd1b3, 48b491a5cc74333c4a6a82fe21cea42c055a3b0b to before b640188b8a6690e685939053c7efdbc7818b5f4e, 48b491a5cc74333c4a6a82fe21cea42c055a3b0b to before b117c41b00902c1a7e24347c405cb82504aeae0b, 48b491a5cc74333c4a6a82fe21cea42c055a3b0b to before acd69b597bd3f76d3b3d322b84082226c00eeaa4, 48b491a5cc74333c4a6a82fe21cea42c055a3b0b to before 61009439e4bd8d74e705ee15940760321be91d8a, 48b491a5cc74333c4a6a82fe21cea42c055a3b0b to before 7af76e9d18a9fd6f8611b3313c86c190f9b6a5a7, 4ffd1d4a6b306ff69cbe412d2c54d2dd349ff436, 5.10.42 to before 5.10.241, 5.12.9 to before 5.13
Linux

Linux · 5.13
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: net/hsr/hsr_slave.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.