CVE-2025-39848: linux kernel 2.6.12; +3 more affected products

Affected technology

linux kernel · from 2.6.12.1 (inclusive), before 5.4.299 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.243 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.192 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.151 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.105 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.46 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.6 (exclusive)
linux

linux kernel · 2.6.12
linux

linux kernel · 2.6.12 · update rc2
linux

linux kernel · 2.6.12 · update rc3
linux

linux kernel · 2.6.12 · update rc4
linux

linux kernel · 2.6.12 · update rc5
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

linux kernel · 6.17 · update rc4
linux

debian linux · 11.0
debian

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 42b46684e2c78ee052d8c2ee8d9c2089233c9094, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 5b079be1b9da49ad88fc304c874d4be7085f7883, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2bd0f67212908243ce88e35bf69fa77155b47b14, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 01a2984cb803f2d487b7074f9718db2bf3531f69, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7d449b7a6c8ee434d10a483feed7c5c50108cf56, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 89064cf534bea4bb28c83fe6bbb26657b19dd5fe, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b1c71d674a308d2fbc83efcf88bfc4217a86aa17, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8156210d36a43e76372312c87eb5ea3dbb405a85
Linux

Linux · 2.6.12
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: net/ax25/ax25_in.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.