CVE-2025-39797: linux kernel before 6.6.103 (exclusive), from 6.7 (inclusive), before 6.12.43 (exclusive), from 6.13 (inclusive)…

Affected technology

linux kernel · before 6.6.103 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux

linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 3d8090bb53424432fa788fe9a49e8ceca74f0544, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2fc5b54368a1bf1d2d74b4d3b8eea5309a653e38, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c67d4e7a8f90fb6361ca89d4d5c9a28f4e935e47, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 29e9158f91f99057dbd35db5e8674d93b38549fe, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 94f39804d891cffe4ce17737d295f3b195bc7299
Linux

Linux · 2.6.12
Linux

Component: Not specified by the source
Function: xfrm_alloc_spi, is, computes
File: net/xfrm/xfrm_state.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.