CVE-2025-39710: linux kernel from 4.13 (inclusive), before 5.4.297 (exclusive), from 5.5 (inclusive), before 5.10.241 (exclusive)…

Affected technology

linux kernel · from 4.13 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.44 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.4 (exclusive)
linux

debian linux · 11.0
debian

Linux · d96d3f30c0f2f564f6922bf4ccdf4464992e31fb to before 0520c89f6280d2b60ab537d5743601185ee7d8ab, d96d3f30c0f2f564f6922bf4ccdf4464992e31fb to before f5b7a943055a4a106d40a03bacd940e28cc1955f, d96d3f30c0f2f564f6922bf4ccdf4464992e31fb to before ef09b96665f16f3f0bac4e111160e6f24f1f8791, d96d3f30c0f2f564f6922bf4ccdf4464992e31fb to before 7638bae4539dcebc3f68fda74ac35d73618ec440, d96d3f30c0f2f564f6922bf4ccdf4464992e31fb to before ba567c2e52fbcf0e20502746bdaa79e911c2e8cf, d96d3f30c0f2f564f6922bf4ccdf4464992e31fb to before 2d8cea8310a245730816a1fd0c9fa4a5a3bdc68c, d96d3f30c0f2f564f6922bf4ccdf4464992e31fb to before f0cbd9386f974d310a0d20a02e4a1323e95ea654, d96d3f30c0f2f564f6922bf4ccdf4464992e31fb to before 49befc830daa743e051a65468c05c2ff9e8580e6
Linux

Linux · 4.13
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: drivers/media/platform/qcom/venus/hfi_venus.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.