CYBER CODE RED

Get real-time updates on Telegram

P4

CVE-2025-39812: linux kernel 2.6.12; +3 more affected products

CVE-2025-39812. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00176 (percentile 0.06676), scored 19-Oct-2026.

Affected technology

linux kernel · from 2.6.12.1 (inclusive), before 5.4.298 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.242 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.191 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.150 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.104 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.45 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.5 (exclusive)
linux

linux kernel · 2.6.12
linux

linux kernel · 2.6.12 · update rc2
linux

linux kernel · 2.6.12 · update rc3
linux

linux kernel · 2.6.12 · update rc4
linux

linux kernel · 2.6.12 · update rc5
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

debian linux · 11.0
debian

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 45e4b36593edffb7bbee5828ae820bc10a9fa0f3, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 9546934c2054bba1bd605c44e936619159a34027, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 17d6c7747045e9b802c2f5dfaba260d309d831ae, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 65b4693d8bab5370cfcb44a275b4d8dcb06e56bf, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 463aa96fca6209bb205f49f7deea3817d7ddaa3a, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1bbc0c02aea1f1c405bd1271466889c25a1fe01b, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f6c2cc99fc2387ba6499facd6108f6543382792d, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2e8750469242cad8f01f320131fd5a6f540dbb99
Linux

Linux · 2.6.12
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: net/sctp/ipv6.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-908
CCR priority
22.0 /100 (P4)
CVSS 3.1
5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS
0.00176 · percentile 0.06676 · 2026-10-19
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2025-39812.html