CYBER CODE RED

Get real-time updates on Telegram

P4

CVE-2025-39766: linux kernel from 4.19 (inclusive), before 5.4.297 (exclusive), from 5.5 (inclusive), before 5.10.241 (exclusive)…

CVE-2025-39766. CVSS 3.1 base score 7.8 (HIGH, NVD). EPSS 0.00184 (percentile 0.07564), scored 19-Oct-2026.

Affected technology

linux kernel · from 4.19 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.44 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.4 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

debian linux · 11.0
debian

Linux · 046f6fd5daefac7f5abdafb436b30f63bc7c602b to before 7689ab22de36f8db19095f6bdf11f28cfde92f5c, 046f6fd5daefac7f5abdafb436b30f63bc7c602b to before de04ddd2980b48caa8d7e24a7db2742917a8b280, 046f6fd5daefac7f5abdafb436b30f63bc7c602b to before 0dacfc5372e314d1219f03e64dde3ab495a5a25e, 046f6fd5daefac7f5abdafb436b30f63bc7c602b to before 710866fc0a64eafcb8bacd91bcb1329eb7e5035f, 046f6fd5daefac7f5abdafb436b30f63bc7c602b to before aa12ee1c1bd260943fd6ab556d8635811c332eeb, 046f6fd5daefac7f5abdafb436b30f63bc7c602b to before ff57186b2cc39766672c4c0332323933e5faaa88, 046f6fd5daefac7f5abdafb436b30f63bc7c602b to before 62d591dde4defb1333d202410609c4ddeae060b3, 046f6fd5daefac7f5abdafb436b30f63bc7c602b to before 15de71d06a400f7fdc15bf377a2552b0ec437cf5
Linux

Linux · 4.19
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: net/sched/sch_cake.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CCR priority
31.2 /100 (P4)
CVSS 3.1
7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · NVD
EPSS
0.00184 · percentile 0.07564 · 2026-10-19
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2025-39766.html