CVE-2025-39817: linux kernel from 3.8.2 (inclusive), before 5.4.298 (exclusive), from 5.5 (inclusive), before 5.10.242 (exclusive)…

Affected technology

linux kernel · from 3.8.2 (inclusive), before 5.4.298 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.242 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.191 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.150 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.104 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.45 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.5 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

debian linux · 11.0
debian

Linux · da27a24383b2b10bf6ebd0db29b325548aafecb4 to before 0f63fbabeaaaaaaf5b742a2f4c1b4590d50bf1f6, da27a24383b2b10bf6ebd0db29b325548aafecb4 to before 794399019301944fd6d2e0d7a51b3327e26c410e, da27a24383b2b10bf6ebd0db29b325548aafecb4 to before 568e7761279b99c6daa3002290fd6d8047ddb6d2, da27a24383b2b10bf6ebd0db29b325548aafecb4 to before d7f5e35e70507d10cbaff5f9e194ed54c4ee14f7, da27a24383b2b10bf6ebd0db29b325548aafecb4 to before 925599eba46045930b850a98ae594d2e3028ac40, da27a24383b2b10bf6ebd0db29b325548aafecb4 to before c2925cd6207079c3f4d040d082515db78d63afbf, da27a24383b2b10bf6ebd0db29b325548aafecb4 to before 71581a82f38e5a4d807d71fc1bb59aead80ccf95, da27a24383b2b10bf6ebd0db29b325548aafecb4 to before a6358f8cf64850f3f27857b8ed8c1b08cfc4685c, 688289c4b745c018b3449b4b4c5a2030083c8eaf, 3.8.2 to before 3.9
Linux

Linux · 3.9
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: fs/efivarfs/super.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.