CVE-2025-39792: linux kernel from 6.10 (inclusive), before 6.12.43 (exclusive), from 6.13 (inclusive), before 6.15.11 (exclusive)…

Affected technology

linux kernel · from 6.10 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

Linux · f211268ed1f9bdf48f06a3ead5f5d88437450579 to before d10bf66d9f9335ffc7521b3029b114f50604cabe, f211268ed1f9bdf48f06a3ead5f5d88437450579 to before f5dd256333c08ab44b5aec4a8118cb04c0f20c54, f211268ed1f9bdf48f06a3ead5f5d88437450579 to before 4e9fef1cf0243d665d75c371cc80be6156cd30a2, f211268ed1f9bdf48f06a3ead5f5d88437450579 to before 2df7168717b7d2d32bcf017c68be16e4aae9dd13
Linux

Linux · 6.10
Linux

Component: Not specified by the source
Function: is, dm_zone_bio_needs_split, bio_needs_zone_write_plugging
File: drivers/md/dm.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.