CYBER CODE RED

Get real-time updates on Telegram

P4

CVE-2025-39824: linux kernel from 4.10 (inclusive), before 5.4.298 (exclusive), from 5.5 (inclusive), before 5.10.242 (exclusive)…

CVE-2025-39824. CVSS 3.1 base score 7.8 (HIGH, NVD). EPSS 0.00167 (percentile 0.05585), scored 19-Oct-2026.

Affected technology

linux kernel · from 4.10 (inclusive), before 5.4.298 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.242 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.191 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.150 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.104 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.45 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.5 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

debian linux · 11.0
debian

Linux · 9ce12d8be12c94334634dd57050444910415e45f to before 9a9e4a8317437bf944fa017c66e1e23a0368b5c7, 9ce12d8be12c94334634dd57050444910415e45f to before 7170122e2ae4ab378c9cdf7cc54dea8b0abbbca5, 9ce12d8be12c94334634dd57050444910415e45f to before eaae728e7335b5dbad70966e2bd520a731fdf7b2, 9ce12d8be12c94334634dd57050444910415e45f to before a8ca8fe7f516d27ece3afb995c3bd4d07dcbe62c, 9ce12d8be12c94334634dd57050444910415e45f to before 5f3c0839b173f7f33415eb098331879e547d1d2d, 9ce12d8be12c94334634dd57050444910415e45f to before c0d77e3441a92d0b4958193c9ac1c3f81c6f1d1c, 9ce12d8be12c94334634dd57050444910415e45f to before 72a4ec018c9e9bc52f4f80eb3afb5d6a6b752275, 9ce12d8be12c94334634dd57050444910415e45f to before d3af6ca9a8c34bbd8cff32b469b84c9021c9e7e4
Linux

Linux · 4.10
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: drivers/hid/hid-asus.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-416
CCR priority
31.2 /100 (P4)
CVSS 3.1
7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · NVD
EPSS
0.00167 · percentile 0.05585 · 2026-10-19
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2025-39824.html