CYBER CODE RED

Get real-time updates on Telegram

P4

CVE-2025-39823: linux kernel from 4.19 (inclusive), before 5.4.298 (exclusive), from 5.5 (inclusive), before 5.10.242 (exclusive)…

CVE-2025-39823. CVSS 3.1 base score 7.8 (HIGH, NVD). EPSS 0.00181 (percentile 0.07235), scored 19-Oct-2026.

Affected technology

linux kernel · from 4.19 (inclusive), before 5.4.298 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.242 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.191 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.150 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.104 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.45 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.5 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

debian linux · 11.0
debian

Linux · 4180bf1b655a791a0a6ef93a2ffffc762722c782 to before 72777fc31aa7ab2ce00f44bfa3929c6eabbeaf48, 4180bf1b655a791a0a6ef93a2ffffc762722c782 to before 31a0ad2f60cb4816e06218b63e695eb72ce74974, 4180bf1b655a791a0a6ef93a2ffffc762722c782 to before d51e381beed5e2f50f85f49f6c90e023754efa12, 4180bf1b655a791a0a6ef93a2ffffc762722c782 to before 33e974c2d5a82b2f9d9ba0ad9cbaabc1c8e3985f, 4180bf1b655a791a0a6ef93a2ffffc762722c782 to before f49161646e03d107ce81a99c6ca5da682fe5fb69, 4180bf1b655a791a0a6ef93a2ffffc762722c782 to before 67a05679621b7f721bdba37a5d18665d3aceb695, 4180bf1b655a791a0a6ef93a2ffffc762722c782 to before f57a4bd8d6cb5af05b8ac1be9098e249034639fb, 4180bf1b655a791a0a6ef93a2ffffc762722c782 to before c87bd4dd43a624109c3cc42d843138378a7f4548
Linux

Linux · 4.19
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: arch/x86/kvm/lapic.c, arch/x86/kvm/x86.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-129
CCR priority
31.2 /100 (P4)
CVSS 3.1
7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · NVD
EPSS
0.00181 · percentile 0.07235 · 2026-10-19
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2025-39823.html