CVE-2025-39709: linux kernel from 4.13 (inclusive), before 5.4.297 (exclusive), from 5.5 (inclusive), before 5.10.241 (exclusive)…

Affected technology

linux kernel · from 4.13 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.44 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.4 (exclusive)
linux

debian linux · 11.0
debian

Linux · af2c3834c8ca7cc65d15592ac671933df8848115 to before 18c2b2bd982b8546312c9a7895515672169f28e0, af2c3834c8ca7cc65d15592ac671933df8848115 to before 88cf63c2599761c48dec8f618d57dccf8f6f4b53, af2c3834c8ca7cc65d15592ac671933df8848115 to before 9db6a78bc5e418e0064e2248c8f3b9b9e8418646, af2c3834c8ca7cc65d15592ac671933df8848115 to before 37cc0ac889b018097c217c5929fd6dc2aed636a1, af2c3834c8ca7cc65d15592ac671933df8848115 to before f54be97bc69b1096198b6717c150dec69f2a1b4d, af2c3834c8ca7cc65d15592ac671933df8848115 to before 639eb587f977c02423f4762467055b23902b4131, af2c3834c8ca7cc65d15592ac671933df8848115 to before e796028b4835af00d9a38ebbb208ec3a6634702a, af2c3834c8ca7cc65d15592ac671933df8848115 to before 3200144a2fa4209dc084a19941b9b203b43580f0
Linux

Linux · 4.13
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: drivers/media/platform/qcom/venus/core.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.