CVE-2025-39828: linux kernel 2.6.12; +3 more affected products

Affected technology

linux kernel · from 2.6.12.1 (inclusive), before 5.4.298 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.242 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.191 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.150 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.104 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.45 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.5 (exclusive)
linux

linux kernel · 2.6.12
linux

linux kernel · 2.6.12 · update rc2
linux

linux kernel · 2.6.12 · update rc3
linux

linux kernel · 2.6.12 · update rc4
linux

linux kernel · 2.6.12 · update rc5
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

debian linux · 11.0
debian

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b502f16bad8f0a4cfbd023452766f21bfda39dde, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 0a6a6d4fb333f7afe22e59ffed18511a7a98efc8, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 62f368472b0aa4b5d91d9b983152855c6b6d8925, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 51872b26429077be611b0a1816e0e722278015c3, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 3c80c230d6e3e6f63d43f4c3f0bb344e3e8b119b, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 33f9e6dc66b32202b95fc861e6b3ea4b0c185b0b, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 3ab9f5ad9baefe6d3d4c37053cdfca2761001dfe, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ec79003c5f9d2c7f9576fc69b8dbda80305cbe3a
Linux

Linux · 2.6.12
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: drivers/atm/atmtcp.c, include/linux/atmdev.h, net/atm/common.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.