CVE-2025-39737: linux kernel 5.4; +3 more affected products

Affected technology

linux kernel · from 5.4.1 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

linux kernel · 5.4
linux

linux kernel · 5.4 · update rc4
linux

linux kernel · 5.4 · update rc5
linux

linux kernel · 5.4 · update rc6
linux

linux kernel · 5.4 · update rc7
linux

linux kernel · 5.4 · update rc8
linux

linux kernel · 6.17 · update rc1
linux

debian linux · 11.0
debian

Linux · 2abd839aa7e615f2bbc50c8ba7deb9e40d186768 to before 9f1f4e95031f84867c5821540466d62f88dab8ca, 2abd839aa7e615f2bbc50c8ba7deb9e40d186768 to before 1ef72a7fedc5bca70e8cc980985790de10d407aa, 2abd839aa7e615f2bbc50c8ba7deb9e40d186768 to before a04de4c40aab9b338dfa989cf4aec70fd187eeb2, 2abd839aa7e615f2bbc50c8ba7deb9e40d186768 to before f014c10d190b92aad366e56b445daffcd1c075e4, 2abd839aa7e615f2bbc50c8ba7deb9e40d186768 to before e21a3ddd58733ce31afcb1e5dc3cb80a4b5bc29b, 2abd839aa7e615f2bbc50c8ba7deb9e40d186768 to before 8d2d22a55ffe35c38e69795468a7addd1a80e9ce, 2abd839aa7e615f2bbc50c8ba7deb9e40d186768 to before 926092268efdf1ed7b55cf486356c74a9e7710d1, 2abd839aa7e615f2bbc50c8ba7deb9e40d186768 to before 9b80430c194e4a114dc663c1025d56b4f3d0153d, 2abd839aa7e615f2bbc50c8ba7deb9e40d186768 to before d1534ae23c2b6be350c8ab060803fbf6e9682adc
Linux

Linux · 5.4
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: mm/kmemleak.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.