Get real-time updates on Telegram
CVE-2025-39760: linux kernel from 2.6.35 (inclusive), before 5.10.241 (exclusive), from 5.11 (inclusive), before 5.15.190 (exclusive)…
CVE-2025-39760. CVSS 3.1 base score 7.1 (HIGH, NVD). EPSS 0.00179 (percentile 0.07062), scored 19-Oct-2026.
Affected technology
linux kernel · from 2.6.35 (inclusive), before 5.10.241 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux
linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux
debian linux · 11.0
debian
Linux · 842f16905dfc6743c1dd80c3d29b49ba3ab7f7c8 to before 5c3097ede7835d3caf6543eb70ff689af4550cd2, 842f16905dfc6743c1dd80c3d29b49ba3ab7f7c8 to before 058ad2b722812708fe90567875704ae36563e33b, 842f16905dfc6743c1dd80c3d29b49ba3ab7f7c8 to before b10e0f868067c6f25bbfabdcf3e1e6432c24ca55, 842f16905dfc6743c1dd80c3d29b49ba3ab7f7c8 to before 5badd56c711e2c8371d1670f9bd486697575423c, 842f16905dfc6743c1dd80c3d29b49ba3ab7f7c8 to before 9512510cee7d1becdb0e9413fdd3ab783e4e30ee, 842f16905dfc6743c1dd80c3d29b49ba3ab7f7c8 to before 4fe6f472f0beef4281e6f03bc38a910a33be663f, 842f16905dfc6743c1dd80c3d29b49ba3ab7f7c8 to before 9843bcb187cb933861f7805022e6873905f669e4, 842f16905dfc6743c1dd80c3d29b49ba3ab7f7c8 to before cf16f408364efd8a68f39011a3b073c83a03612d
Linux
Linux · 2.6.35
Linux
SIMATIC CN 4100 · 0 to before V5.0
Siemens
Component: Not specified by the source
File: drivers/usb/core/config.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-125
- CCR priority
- 28.4 /100 (P4)
- CVSS 3.1
- 7.1 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H · NVD
- EPSS
- 0.00179 · percentile 0.07062 · 2026-10-19
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-20 01:44:01.123206+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-39760.html