Get real-time updates on Telegram
CVE-2025-39783: linux kernel from 4.18 (inclusive), before 5.4.297 (exclusive), from 5.5 (inclusive), before 5.10.241 (exclusive)…
CVE-2025-39783. CVSS 3.1 base score 7.8 (HIGH, NVD). EPSS 0.00167 (percentile 0.05585), scored 19-Oct-2026.
Affected technology
linux kernel · from 4.18 (inclusive), before 5.4.297 (exclusive)
linux
linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.44 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.16.4 (exclusive)
linux
debian linux · 11.0
debian
Linux · ef1433f717a2c63747a519d86965d73ff9bd08b3 to before 80ea6e6904fb2ba4ccb5d909579988466ec65358, ef1433f717a2c63747a519d86965d73ff9bd08b3 to before d5aecddc3452371d9da82cdbb0c715812524b54b, ef1433f717a2c63747a519d86965d73ff9bd08b3 to before dc4ffbd571716ff3b171418fb03abe80e720a7b1, ef1433f717a2c63747a519d86965d73ff9bd08b3 to before 409af8b9f7b4f23cd0464e71c6cd6fe13c076ae2, ef1433f717a2c63747a519d86965d73ff9bd08b3 to before 0758862386f114d9ab1e23181461bd1e2e9ec4c6, ef1433f717a2c63747a519d86965d73ff9bd08b3 to before 6cf65505523224cab1449d726d2ce8180c2941ee, ef1433f717a2c63747a519d86965d73ff9bd08b3 to before a302bd89db35d8b7e279de4d2b41c16c7f191069, ef1433f717a2c63747a519d86965d73ff9bd08b3 to before d79123d79a8154b4318529b7b2ff7e15806f480b
Linux
Linux · 4.18
Linux
SIMATIC CN 4100 · 0 to before V5.0
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens
Component: Not specified by the source
File: drivers/pci/endpoint/pci-epf-core.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-787
- CCR priority
- 31.2 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · NVD
- EPSS
- 0.00167 · percentile 0.05585 · 2026-10-19
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-20 01:44:01.123206+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-39783.html