CYBER CODE RED

Get real-time updates on Telegram

P4

CVE-2025-39839: linux kernel from 3.10 (inclusive), before 5.4.299 (exclusive), from 5.5 (inclusive), before 5.10.243 (exclusive)…

CVE-2025-39839. CVSS 3.1 base score 7.1 (HIGH, NVD). EPSS 0.00259 (percentile 0.16528), scored 19-Oct-2026.

Affected technology

linux kernel · from 3.10 (inclusive), before 5.4.299 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.243 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.192 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.151 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.105 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.46 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.6 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

linux kernel · 6.17 · update rc4
linux

debian linux · 11.0
debian

Linux · 2df5278b0267c799f3e877e8eeddbb6e93cda0bb to before 30fc47248f02b8a14a61df469e1da4704be1a19f, 2df5278b0267c799f3e877e8eeddbb6e93cda0bb to before 1e36c6c8dc8023b4bbe9a16e819f9998b9b6a183, 2df5278b0267c799f3e877e8eeddbb6e93cda0bb to before 5d334bce9fad58cf328d8fa14ea1fff855819863, 2df5278b0267c799f3e877e8eeddbb6e93cda0bb to before dce6c2aa70e94c04c523b375dfcc664d7a0a560a, 2df5278b0267c799f3e877e8eeddbb6e93cda0bb to before bb37252c9af1cb250f34735ee98f80b46be3cef1, 2df5278b0267c799f3e877e8eeddbb6e93cda0bb to before 20080709457bc1e920eb002483d7d981d9b2ac1c, 2df5278b0267c799f3e877e8eeddbb6e93cda0bb to before a67c6397fcb7e842d3c595243049940970541c48, 2df5278b0267c799f3e877e8eeddbb6e93cda0bb to before d77b6ff0ce35a6d0b0b7b9581bc3f76d041d4087
Linux

Linux · 3.10
Linux

RUGGEDCOM RST2428P · 0 to before V3.3
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.3
Siemens

SCALANCE XCH328 · 0 to before V3.3
Siemens

SCALANCE XCM324 · 0 to before V3.3
Siemens

SCALANCE XCM328 · 0 to before V3.3
Siemens

SCALANCE XCM332 · 0 to before V3.3
Siemens

SCALANCE XRH334 (24 V DC, 8xFO, CC) · 0 to before V3.3
Siemens

SCALANCE XRM334 (230 V AC, 12xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (230 V AC, 8xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) · 0 to before V3.3
Siemens

SCALANCE XRM334 (24 V DC, 12xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (24 V DC, 8xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) · 0 to before V3.3
Siemens

SCALANCE XRM334 (2x230 V AC, 12xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (2x230 V AC, 8xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) · 0 to before V3.3
Siemens

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: net/batman-adv/network-coding.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-125
CCR priority
28.5 /100 (P4)
CVSS 3.1
7.1 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H · NVD
EPSS
0.00259 · percentile 0.16528 · 2026-10-19
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2025-39839.html