Get real-time updates on Telegram
CVE-2025-39823: linux kernel from 4.19 (inclusive), before 5.4.298 (exclusive), from 5.5 (inclusive), before 5.10.242 (exclusive)…
CVE-2025-39823. CVSS 3.1 base score 7.8 (HIGH, NVD). EPSS 0.00181 (percentile 0.07235), scored 19-Oct-2026.
Affected technology
linux kernel · from 4.19 (inclusive), before 5.4.298 (exclusive)
linux
linux kernel · from 5.5 (inclusive), before 5.10.242 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.191 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.150 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.104 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.45 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.16.5 (exclusive)
linux
linux kernel · 6.17 · update rc1
linux
linux kernel · 6.17 · update rc2
linux
linux kernel · 6.17 · update rc3
linux
debian linux · 11.0
debian
Linux · 4180bf1b655a791a0a6ef93a2ffffc762722c782 to before 72777fc31aa7ab2ce00f44bfa3929c6eabbeaf48, 4180bf1b655a791a0a6ef93a2ffffc762722c782 to before 31a0ad2f60cb4816e06218b63e695eb72ce74974, 4180bf1b655a791a0a6ef93a2ffffc762722c782 to before d51e381beed5e2f50f85f49f6c90e023754efa12, 4180bf1b655a791a0a6ef93a2ffffc762722c782 to before 33e974c2d5a82b2f9d9ba0ad9cbaabc1c8e3985f, 4180bf1b655a791a0a6ef93a2ffffc762722c782 to before f49161646e03d107ce81a99c6ca5da682fe5fb69, 4180bf1b655a791a0a6ef93a2ffffc762722c782 to before 67a05679621b7f721bdba37a5d18665d3aceb695, 4180bf1b655a791a0a6ef93a2ffffc762722c782 to before f57a4bd8d6cb5af05b8ac1be9098e249034639fb, 4180bf1b655a791a0a6ef93a2ffffc762722c782 to before c87bd4dd43a624109c3cc42d843138378a7f4548
Linux
Linux · 4.19
Linux
SIMATIC CN 4100 · 0 to before V5.0
Siemens
Component: Not specified by the source
File: arch/x86/kvm/lapic.c, arch/x86/kvm/x86.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-129
- CCR priority
- 31.2 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · NVD
- EPSS
- 0.00181 · percentile 0.07235 · 2026-10-19
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-20 01:44:01.123206+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-39823.html