CVE-2025-39860: linux kernel from 4.14.322 (inclusive), before 4.15 (exclusive), from 4.19.291 (inclusive), before 4.20 (exclusive)…

Affected technology

linux kernel · from 4.14.322 (inclusive), before 4.15 (exclusive)
linux

linux kernel · from 4.19.291 (inclusive), before 4.20 (exclusive)
linux

linux kernel · from 5.4.253 (inclusive), before 5.4.299 (exclusive)
linux

linux kernel · from 5.10.190 (inclusive), before 5.10.243 (exclusive)
linux

linux kernel · from 5.15.126 (inclusive), before 5.15.192 (exclusive)
linux

linux kernel · from 6.1.45 (inclusive), before 6.1.151 (exclusive)
linux

linux kernel · from 6.4.10 (inclusive), before 6.6.105 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.46 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.6 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

linux kernel · 6.17 · update rc4
linux

debian linux · 11.0
debian

Linux · a2da00d1ea1abfb04f846638e210b5b5166e3c9c to before 964cbb198f9c46c2b2358cd1faffc04c1e8248cf, 06f87c96216bc5cd1094c23492274f77f1d5dd3b to before 83e1d9892ef51785cf0760b7681436760dda435a, fbe5a2fed8156cc19eb3b956602b0a1dd46a302d to before 47f6090bcf75c369695d21c3f179db8a56bbbd49, 29fac18499332211b2615ade356e2bd8b3269f98 to before 2ca99fc3512a8074de20ee52a87b492dfcc41a4d, 1728137b33c00d5a2b5110ed7aafb42e7c32e4a1 to before 6077d16b5c0f65d571eee709de2f0541fb5ef0ca, 1728137b33c00d5a2b5110ed7aafb42e7c32e4a1 to before 306b0991413b482dbf5585b423022123bb505966, 1728137b33c00d5a2b5110ed7aafb42e7c32e4a1 to before 3dff390f55ccd9ce12e91233849769b5312180c2, 1728137b33c00d5a2b5110ed7aafb42e7c32e4a1 to before 862c628108562d8c7a516a900034823b381d3cba, 51822644a047eac2310fab0799b64e3430b5a111, 82cdb2ccbe43337798393369f0ceb98699fe6037, 10426afe65c8bf7b24dd0c7be4dcc65f86fc99f9, 5.4.253 to before 5.4.299, 5.10.190 to before 5.10.243, 5.15.126 to before 5.15.192, 6.1.45 to before 6.1.151, 4.14.322 to before 4.15, 4.19.291 to before 4.20, 6.4.10 to before 6.5
Linux

Linux · 6.5
Linux

RUGGEDCOM RST2428P · 0 to before V3.3
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.3
Siemens

SCALANCE XCH328 · 0 to before V3.3
Siemens

SCALANCE XCM324 · 0 to before V3.3
Siemens

SCALANCE XCM328 · 0 to before V3.3
Siemens

SCALANCE XCM332 · 0 to before V3.3
Siemens

SCALANCE XRH334 (24 V DC, 8xFO, CC) · 0 to before V3.3
Siemens

SCALANCE XRM334 (230 V AC, 12xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (230 V AC, 8xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) · 0 to before V3.3
Siemens

SCALANCE XRM334 (24 V DC, 12xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (24 V DC, 8xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) · 0 to before V3.3
Siemens

SCALANCE XRM334 (2x230 V AC, 12xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (2x230 V AC, 8xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) · 0 to before V3.3
Siemens

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: net/bluetooth/l2cap_sock.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.0/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.