CVE-2025-39849: linux kernel from 6.1.16 (inclusive), before 6.1.151 (exclusive), from 6.2.3 (inclusive), before 6.6.105 (exclusive)…

Affected technology

linux kernel · from 6.1.16 (inclusive), before 6.1.151 (exclusive)
linux

linux kernel · from 6.2.3 (inclusive), before 6.6.105 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.46 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.6 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

linux kernel · 6.17 · update rc4
linux

debian linux · 11.0
debian

Linux · dd43f8f90206054e7da7593de0a334fb2cd0ea88 to before 8e751d46336205abc259ed3990e850a9843fb649, c38c701851011c94ce3be1ccb3593678d2933fd8 to before e472f59d02c82b511bc43a3f96d62ed08bf4537f, c38c701851011c94ce3be1ccb3593678d2933fd8 to before 31229145e6ba5ace3e9391113376fa05b7831ede, c38c701851011c94ce3be1ccb3593678d2933fd8 to before 5cb7cab7adf9b1e6a99e2081b0e30e9e59d07523, c38c701851011c94ce3be1ccb3593678d2933fd8 to before 62b635dcd69c4fde7ce1de4992d71420a37e51e3, bf3c348c5fdcf00a7eeed04a1b83e454d2dca2e5, 6.1.16 to before 6.1.151, 6.2.3 to before 6.3
Linux

Linux · 6.3
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: net/wireless/sme.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.