CVE-2025-39749: linux kernel from 5.3 (inclusive), before 5.4.297 (exclusive), from 5.5 (inclusive), before 5.10.241 (exclusive), from…

CVE-2025-39749. CVSS 3.1 base score 7.0 (HIGH, NVD). EPSS 0.00174 (percentile 0.06472), scored 19-Oct-2026.

Affected technology

linux kernel · from 5.3 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

debian linux · 11.0
debian

Linux · 0864f057b050bc6dd68106b3185e02db5140012d to before 74f58f382a7c8333f8d09701aefaa25913bdbe0e, 0864f057b050bc6dd68106b3185e02db5140012d to before f937759c7432d6151b73e1393b6517661813d506, 0864f057b050bc6dd68106b3185e02db5140012d to before 0ad84d62217488e679ecc90e8628980dcc003de3, 0864f057b050bc6dd68106b3185e02db5140012d to before b5de8d80b5d049f051b95d9b1ee50ae4ab656124, 0864f057b050bc6dd68106b3185e02db5140012d to before b55947b725f190396f475d5d0c59aa855a4d8895, 0864f057b050bc6dd68106b3185e02db5140012d to before e35e711c78c8a4c43330c0dcb1c4d507a19c20f4, 0864f057b050bc6dd68106b3185e02db5140012d to before 90de9c94ea72327cfa9c2c9f6113c23a513af60b, 0864f057b050bc6dd68106b3185e02db5140012d to before 55e11f6776798b27cf09a7aa0d718415d4fc9cf5, 0864f057b050bc6dd68106b3185e02db5140012d to before 90c09d57caeca94e6f3f87c49e96a91edd40cbfd
Linux

Linux · 5.3
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: kernel/rcu/tree_plugin.h

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 20-Oct-2026 01:47 UTC

CCR priority: 28.0 /100 (P4)
CVSS 3.1: 7.0 /10 · CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H · NVD
EPSS: 0.00174 · percentile 0.06472 · 2026-10-19
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-20 01:44:01.123206+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2025-39749.html