P4Verified

CVE-2025-39773: linux kernel from 2.6.34 (inclusive), before 5.15.190 (exclusive), from 5.16 (inclusive), before 6.1.149 (exclusive)…

CVE-2025-39773. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00123 (percentile 0.01884), scored 14-Oct-2026.

Affected technology

linux kernel · from 2.6.34 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.44 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.4 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

debian linux · 11.0
debian

Linux · d902eee43f1951b358d7347d9165c6af21cf7b1b to before 34171b9e53bd1dc264f5556579f2b04f04435c73, d902eee43f1951b358d7347d9165c6af21cf7b1b to before 43e281fde5e76a866a4d10780c35023f16c0e432, d902eee43f1951b358d7347d9165c6af21cf7b1b to before 96476b043efb86a94f2badd260f7f99c97bd5893, d902eee43f1951b358d7347d9165c6af21cf7b1b to before bdb19cd0de739870bb3494c815138b9dc30875c4, d902eee43f1951b358d7347d9165c6af21cf7b1b to before 5bf5fce8a0c2a70d063af778fdb5b27238174cdd, d902eee43f1951b358d7347d9165c6af21cf7b1b to before d1547bf460baec718b3398365f8de33d25c5f36f
Linux

Linux · 2.6.34
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/bridge/br_multicast.c, net/bridge/br_private.h

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 15-Oct-2026 09:20 UTC

CWE: CWE-667
CCR priority: 22.0 /100 (P4)
CVSS 3.1: 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS: 0.00123 · percentile 0.01884 · 2026-10-14
KEV: no

Provenance

FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2025-39773.html