Get real-time updates on Telegram
CVE-2025-39748: linux kernel before 6.12.43 (exclusive), from 6.13 (inclusive), before 6.15.11 (exclusive), from 6.16 (inclusive)…
CVE-2025-39748. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00173 (percentile 0.0634), scored 14-Oct-2026.
Affected technology
linux kernel · before 6.12.43 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux
linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux
Linux · 960ea056561a08e2b837b2f02d22c53226414a84 to before 22191359f8454b0be082c3b126f86bcbea0f1318, 960ea056561a08e2b837b2f02d22c53226414a84 to before c29dd8336236a4deb75596b52d2dd16ccc4a380d, 960ea056561a08e2b837b2f02d22c53226414a84 to before 591c788d16046edb0220800bf1819554af5853ce, 960ea056561a08e2b837b2f02d22c53226414a84 to before 0643aa2468192a4d81326e8e76543854870b1ee2, 960ea056561a08e2b837b2f02d22c53226414a84 to before f01e06930444cab289a8783017af9b64255bd103, 960ea056561a08e2b837b2f02d22c53226414a84 to before 2fd0c26bacd90ef26522bd3169000a4715bf151f, 960ea056561a08e2b837b2f02d22c53226414a84 to before 80a6b11862a7cfdf691e8f9faee89cfea219f098, 960ea056561a08e2b837b2f02d22c53226414a84 to before 6279846b9b2532e1b04559ef8bd0dec049f29383
Linux
Linux · 5.0
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: kernel/bpf/verifier.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 22.0 /100 (P4)
- CVSS 3.1
- 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
- EPSS
- 0.00173 · percentile 0.0634 · 2026-10-14
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-39748.html