CVE-2025-39787: linux kernel from 4.11 (inclusive), before 5.4.297 (exclusive), from 5.5 (inclusive), before 5.10.241 (exclusive)…

Affected technology

linux kernel · from 4.11 (inclusive), before 5.4.297 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.241 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.190 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.149 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.44 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.4 (exclusive)
linux

debian linux · 11.0
debian

Linux · 2aad40d911eeb7dcac91c669f2762a28134f0eb1 to before 1096eb63ecfc8df90b70cd068e6de0c2ff204dfd, 2aad40d911eeb7dcac91c669f2762a28134f0eb1 to before e1720eb32acf411c328af6a8c8f556c94535808e, 2aad40d911eeb7dcac91c669f2762a28134f0eb1 to before 0d59ce2bfc3bb13abe6240335a1bf7b96536d022, 2aad40d911eeb7dcac91c669f2762a28134f0eb1 to before 43d26997d88c4056fce0324e72f62556bc7e8e8d, 2aad40d911eeb7dcac91c669f2762a28134f0eb1 to before 981c845f29838e468a9bfa87f784307193a31297, 2aad40d911eeb7dcac91c669f2762a28134f0eb1 to before 87bfabb3b2f46827639173f143aa43f7cfc0a7e6, 2aad40d911eeb7dcac91c669f2762a28134f0eb1 to before 81278be4eb5f08ba2c68c3055893e61cc03727fe, 2aad40d911eeb7dcac91c669f2762a28134f0eb1 to before 9f9967fed9d066ed3dae9372b45ffa4f6fccfeef
Linux

Linux · 4.11
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

Component: Not specified by the source
File: drivers/soc/qcom/mdt_loader.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.