CYBER CODE RED

Get real-time updates on Telegram

P4

CVE-2025-39864: linux kernel from 5.4 (inclusive), before 5.4.299 (exclusive), from 5.5 (inclusive), before 5.10.243 (exclusive), from…

CVE-2025-39864. CVSS 3.1 base score 7.8 (HIGH, NVD). EPSS 0.00235 (percentile 0.13453), scored 19-Oct-2026.

Affected technology

linux kernel · from 5.4 (inclusive), before 5.4.299 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.243 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.192 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.151 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.105 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.46 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.6 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

linux kernel · 6.17 · update rc4
linux

debian linux · 11.0
debian

Linux · 3ab8227d3e7d1d2bf1829675d3197e3cb600e9f6 to before a8bb681e879ca3c9f722aa08d3d7ae41c42a8807, 3ab8227d3e7d1d2bf1829675d3197e3cb600e9f6 to before a97a9791e455bb0cd5e7a38b5abcb05523d4e21c, 3ab8227d3e7d1d2bf1829675d3197e3cb600e9f6 to before ff040562c10a540b8d851f7f4145fa112977f853, 3ab8227d3e7d1d2bf1829675d3197e3cb600e9f6 to before 6854476d9e1aeaaf05ebc98d610061c2075db07d, 3ab8227d3e7d1d2bf1829675d3197e3cb600e9f6 to before b7d08929178c16398278613df07ad65cf63cce9d, 3ab8227d3e7d1d2bf1829675d3197e3cb600e9f6 to before 5b7ae04969f822283a95c866967e42b4d75e0eef, 3ab8227d3e7d1d2bf1829675d3197e3cb600e9f6 to before 912c4b66bef713a20775cfbf3b5e9bd71525c716, 3ab8227d3e7d1d2bf1829675d3197e3cb600e9f6 to before 26e84445f02ce6b2fe5f3e0e28ff7add77f35e08
Linux

Linux · 5.4
Linux

RUGGEDCOM RST2428P · 0 to before V3.3
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.3
Siemens

SCALANCE XCH328 · 0 to before V3.3
Siemens

SCALANCE XCM324 · 0 to before V3.3
Siemens

SCALANCE XCM328 · 0 to before V3.3
Siemens

SCALANCE XCM332 · 0 to before V3.3
Siemens

SCALANCE XRH334 (24 V DC, 8xFO, CC) · 0 to before V3.3
Siemens

SCALANCE XRM334 (230 V AC, 12xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (230 V AC, 8xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) · 0 to before V3.3
Siemens

SCALANCE XRM334 (24 V DC, 12xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (24 V DC, 8xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) · 0 to before V3.3
Siemens

SCALANCE XRM334 (2x230 V AC, 12xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (2x230 V AC, 8xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) · 0 to before V3.3
Siemens

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: net/wireless/scan.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-416
CCR priority
31.3 /100 (P4)
CVSS 3.1
7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · NVD
EPSS
0.00235 · percentile 0.13453 · 2026-10-19
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2025-39864.html