Get real-time updates on Telegram
CVE-2025-39839: linux kernel from 3.10 (inclusive), before 5.4.299 (exclusive), from 5.5 (inclusive), before 5.10.243 (exclusive)…
CVE-2025-39839. CVSS 3.1 base score 7.1 (HIGH, NVD). EPSS 0.00259 (percentile 0.16528), scored 19-Oct-2026.
Affected technology
linux kernel · from 3.10 (inclusive), before 5.4.299 (exclusive)
linux
linux kernel · from 5.5 (inclusive), before 5.10.243 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.192 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.151 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.105 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.46 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.16.6 (exclusive)
linux
linux kernel · 6.17 · update rc1
linux
linux kernel · 6.17 · update rc2
linux
linux kernel · 6.17 · update rc3
linux
linux kernel · 6.17 · update rc4
linux
debian linux · 11.0
debian
Linux · 2df5278b0267c799f3e877e8eeddbb6e93cda0bb to before 30fc47248f02b8a14a61df469e1da4704be1a19f, 2df5278b0267c799f3e877e8eeddbb6e93cda0bb to before 1e36c6c8dc8023b4bbe9a16e819f9998b9b6a183, 2df5278b0267c799f3e877e8eeddbb6e93cda0bb to before 5d334bce9fad58cf328d8fa14ea1fff855819863, 2df5278b0267c799f3e877e8eeddbb6e93cda0bb to before dce6c2aa70e94c04c523b375dfcc664d7a0a560a, 2df5278b0267c799f3e877e8eeddbb6e93cda0bb to before bb37252c9af1cb250f34735ee98f80b46be3cef1, 2df5278b0267c799f3e877e8eeddbb6e93cda0bb to before 20080709457bc1e920eb002483d7d981d9b2ac1c, 2df5278b0267c799f3e877e8eeddbb6e93cda0bb to before a67c6397fcb7e842d3c595243049940970541c48, 2df5278b0267c799f3e877e8eeddbb6e93cda0bb to before d77b6ff0ce35a6d0b0b7b9581bc3f76d041d4087
Linux
Linux · 3.10
Linux
RUGGEDCOM RST2428P · 0 to before V3.3
Siemens
SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.3
Siemens
SCALANCE XCH328 · 0 to before V3.3
Siemens
SCALANCE XCM324 · 0 to before V3.3
Siemens
SCALANCE XCM328 · 0 to before V3.3
Siemens
SCALANCE XCM332 · 0 to before V3.3
Siemens
SCALANCE XRH334 (24 V DC, 8xFO, CC) · 0 to before V3.3
Siemens
SCALANCE XRM334 (230 V AC, 12xFO) · 0 to before V3.3
Siemens
SCALANCE XRM334 (230 V AC, 8xFO) · 0 to before V3.3
Siemens
SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) · 0 to before V3.3
Siemens
SCALANCE XRM334 (24 V DC, 12xFO) · 0 to before V3.3
Siemens
SCALANCE XRM334 (24 V DC, 8xFO) · 0 to before V3.3
Siemens
SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) · 0 to before V3.3
Siemens
SCALANCE XRM334 (2x230 V AC, 12xFO) · 0 to before V3.3
Siemens
SCALANCE XRM334 (2x230 V AC, 8xFO) · 0 to before V3.3
Siemens
SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) · 0 to before V3.3
Siemens
SIMATIC CN 4100 · 0 to before V5.0
Siemens
Component: Not specified by the source
File: net/batman-adv/network-coding.c
Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-125
- CCR priority
- 28.5 /100 (P4)
- CVSS 3.1
- 7.1 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H · NVD
- EPSS
- 0.00259 · percentile 0.16528 · 2026-10-19
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-20 01:44:01.123206+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-39839.html