CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2025-39770: linux kernel 6.12; +6 more affected products

CVE-2025-39770. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00366 (percentile 0.28741), scored 14-Oct-2026.

Affected technology

linux kernel · from 4.19.323 (inclusive), before 4.20 (exclusive)
linux

linux kernel · from 5.4.285 (inclusive), before 5.5 (exclusive)
linux

linux kernel · from 5.10.229 (inclusive), before 5.11 (exclusive)
linux

linux kernel · from 5.15.171 (inclusive), before 5.16 (exclusive)
linux

linux kernel · from 6.1.116 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.6.60 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.11.7 (inclusive), before 6.12 (exclusive)
linux

linux kernel · from 6.12.1 (inclusive), before 6.12.44 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.4 (exclusive)
linux

linux kernel · 6.12
linux

linux kernel · 6.12 · update rc6
linux

linux kernel · 6.12 · update rc7
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

debian linux · 11.0
debian

Linux · a84978a9cda68f0afe3f01d476c68db21526baf1 to before a0478d7e888028f85fa7785ea838ce0ca09398e2, c69bc67c1cb211aa390bea6e512bb01b1241fefb to before 2156d9e9f2e483c8c3906c0ea57ea312c1424235, 04c20a9356f283da623903e81e7c6d5df7e4dc3c to before 041e2f945f82fdbd6fff577b79c33469430297aa, 04c20a9356f283da623903e81e7c6d5df7e4dc3c to before 794ddbb7b63b6828c75967b9bcd43b086716e7a1, 04c20a9356f283da623903e81e7c6d5df7e4dc3c to before 864e3396976ef41de6cc7bc366276bf4e084fff2, bcefc3cd7f592a70fcbbbfd7ad1fbc69172ea78b, 477b35d94a21530046fe91589960732fcf2b29ed, a27a5c40ee4cbe00294e2c76160de5f2589061ba, 9f605135a5c0fe614c2b15197b9ced1e217eca59, 705350fbd6ed4b5d89ee045fa57a0594a72b17d7, 6.1.116 to before 6.1.149, 6.6.60 to before 6.6.103, 4.19.323 to before 4.20, 5.4.285 to before 5.5, 5.10.229 to before 5.11, 5.15.171 to before 5.16, 6.11.7 to before 6.12
Linux

Linux · 6.12
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/core/dev.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CCR priority
22.1 /100 (P4)
CVSS 3.1
5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS
0.00366 · percentile 0.28741 · 2026-10-14
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2025-39770.html