CVE-2025-39736: linux kernel from 5.4 (inclusive), before 5.4.297 (exclusive), from 5.5 (inclusive), before 5.10.241 (exclusive), from…

Affected technology

linux kernel · from 5.4 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

debian linux · 11.0
debian

Linux · c5665868183fec689dbab9fb8505188b2c4f0757 to before c7b6ea0ede687e7460e593c5ea478f50aa41682a, c5665868183fec689dbab9fb8505188b2c4f0757 to before 4b0151e1d468eb2667c37b7af99b3c075072d334, c5665868183fec689dbab9fb8505188b2c4f0757 to before f249d32bb54876b4b6c3ae071af8ddca77af390b, c5665868183fec689dbab9fb8505188b2c4f0757 to before 62879faa8efe8d8a9c7bf7606ee9c068012d7dac, c5665868183fec689dbab9fb8505188b2c4f0757 to before 1da95d3d4b7b1d380ebd87b71a61e7e6aed3265d, c5665868183fec689dbab9fb8505188b2c4f0757 to before a0854de00ce2ee27edf39037e7836ad580eb3350, c5665868183fec689dbab9fb8505188b2c4f0757 to before 08f70be5e406ce47c822f2dd11c1170ca259605b, c5665868183fec689dbab9fb8505188b2c4f0757 to before a181b228b37a6a5625dad2bb4265bb7abb673e9f, c5665868183fec689dbab9fb8505188b2c4f0757 to before 47b0f6d8f0d2be4d311a49e13d2fd5f152f492b2
Linux

Linux · 5.4
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: mm/kmemleak.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.