P4Verified

CVE-2025-39756: linux kernel from 2.6.25 (inclusive), before 5.4.297 (exclusive), from 5.5 (inclusive), before 5.10.241 (exclusive)…

CVE-2025-39756. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00183 (percentile 0.07299), scored 14-Oct-2026.

Affected technology

linux kernel · from 2.6.25 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

debian linux · 11.0
debian

Linux · 9cfe015aa424b3c003baba3841a60dd9b5ad319b to before b4159c5a90c03f8acd3de345a7f5fc63b0909818, 9cfe015aa424b3c003baba3841a60dd9b5ad319b to before f95638a8f22eba307dceddf5aef9ae2326bbcf98, 9cfe015aa424b3c003baba3841a60dd9b5ad319b to before 749528086620f8012b83ae032a80f6ffa80c45cd, 9cfe015aa424b3c003baba3841a60dd9b5ad319b to before 628fc28f42d979f36dbf75a6129ac7730e30c04e, 9cfe015aa424b3c003baba3841a60dd9b5ad319b to before 237e416eb62101f21b28c9e6e564d10efe1ecc6f, 9cfe015aa424b3c003baba3841a60dd9b5ad319b to before d4f9351243c17865a8cdbe6b3ccd09d0b13a7bcc, 9cfe015aa424b3c003baba3841a60dd9b5ad319b to before 9f61fa6a2a89a610120bc4e5d24379c667314b5c, 9cfe015aa424b3c003baba3841a60dd9b5ad319b to before dfd1f4ea98c3bd3a03d12169b5b2daa1f0a3e4ae, 9cfe015aa424b3c003baba3841a60dd9b5ad319b to before 04a2c4b4511d186b0fce685da21085a5d4acd370
Linux

Linux · 2.6.25
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: fs/file.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 15-Oct-2026 09:20 UTC

CWE: CWE-401
CCR priority: 22.0 /100 (P4)
CVSS 3.1: 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS: 0.00183 · percentile 0.07299 · 2026-10-14
KEV: no

Provenance

FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2025-39756.html