CYBER CODE RED

Get real-time updates on Telegram

P4

CVE-2025-39730: linux kernel from 4.13 (inclusive), before 5.4.297 (exclusive), from 5.5 (inclusive), before 5.10.241 (exclusive)…

CVE-2025-39730. CVSS 3.1 base score 7.8 (HIGH, NVD). EPSS 0.00198 (percentile 0.08913), scored 19-Oct-2026.

Affected technology

linux kernel · from 4.13 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.148 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.102 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.42 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.10 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.1 (exclusive)
linux

debian linux · 11.0
debian

Linux · 20fa19027286983ab2734b5910c4a687436e0c31 to before 7f8eca87fef7519e9c41f3258f25ebc2752247ee, 20fa19027286983ab2734b5910c4a687436e0c31 to before cb09afa0948d96b1e385d609ed044bb1aa043536, 20fa19027286983ab2734b5910c4a687436e0c31 to before 3570ef5c31314c13274c935a20b91768ab5bf412, 20fa19027286983ab2734b5910c4a687436e0c31 to before 763810bb883cb4de412a72f338d80947d97df67b, 20fa19027286983ab2734b5910c4a687436e0c31 to before 12ad3def2e5e0b120e3d0cb6ce8b7b796819ad40, 20fa19027286983ab2734b5910c4a687436e0c31 to before 2ad40b7992aa26bc631afc1a995b0e3ddc30de3f, 20fa19027286983ab2734b5910c4a687436e0c31 to before b7f7866932466332a2528fda099000b035303485, 20fa19027286983ab2734b5910c4a687436e0c31 to before 7dd36f7477d1e03a1fcf8d13531ca326c4fb599f, 20fa19027286983ab2734b5910c4a687436e0c31 to before ef93a685e01a281b5e2a25ce4e3428cf9371a205
Linux

Linux · 4.13
Linux

Component: Not specified by the source
Function: needs
File: fs/nfs/export.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CCR priority
31.2 /100 (P4)
CVSS 3.1
7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · NVD
EPSS
0.00198 · percentile 0.08913 · 2026-10-19
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2025-39730.html