Get real-time updates on Telegram
CVE-2025-39864: linux kernel from 5.4 (inclusive), before 5.4.299 (exclusive), from 5.5 (inclusive), before 5.10.243 (exclusive), from…
CVE-2025-39864. CVSS 3.1 base score 7.8 (HIGH, NVD). EPSS 0.00235 (percentile 0.13453), scored 19-Oct-2026.
Affected technology
linux kernel · from 5.4 (inclusive), before 5.4.299 (exclusive)
linux
linux kernel · from 5.5 (inclusive), before 5.10.243 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.192 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.151 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.105 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.46 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.16.6 (exclusive)
linux
linux kernel · 6.17 · update rc1
linux
linux kernel · 6.17 · update rc2
linux
linux kernel · 6.17 · update rc3
linux
linux kernel · 6.17 · update rc4
linux
debian linux · 11.0
debian
Linux · 3ab8227d3e7d1d2bf1829675d3197e3cb600e9f6 to before a8bb681e879ca3c9f722aa08d3d7ae41c42a8807, 3ab8227d3e7d1d2bf1829675d3197e3cb600e9f6 to before a97a9791e455bb0cd5e7a38b5abcb05523d4e21c, 3ab8227d3e7d1d2bf1829675d3197e3cb600e9f6 to before ff040562c10a540b8d851f7f4145fa112977f853, 3ab8227d3e7d1d2bf1829675d3197e3cb600e9f6 to before 6854476d9e1aeaaf05ebc98d610061c2075db07d, 3ab8227d3e7d1d2bf1829675d3197e3cb600e9f6 to before b7d08929178c16398278613df07ad65cf63cce9d, 3ab8227d3e7d1d2bf1829675d3197e3cb600e9f6 to before 5b7ae04969f822283a95c866967e42b4d75e0eef, 3ab8227d3e7d1d2bf1829675d3197e3cb600e9f6 to before 912c4b66bef713a20775cfbf3b5e9bd71525c716, 3ab8227d3e7d1d2bf1829675d3197e3cb600e9f6 to before 26e84445f02ce6b2fe5f3e0e28ff7add77f35e08
Linux
Linux · 5.4
Linux
RUGGEDCOM RST2428P · 0 to before V3.3
Siemens
SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.3
Siemens
SCALANCE XCH328 · 0 to before V3.3
Siemens
SCALANCE XCM324 · 0 to before V3.3
Siemens
SCALANCE XCM328 · 0 to before V3.3
Siemens
SCALANCE XCM332 · 0 to before V3.3
Siemens
SCALANCE XRH334 (24 V DC, 8xFO, CC) · 0 to before V3.3
Siemens
SCALANCE XRM334 (230 V AC, 12xFO) · 0 to before V3.3
Siemens
SCALANCE XRM334 (230 V AC, 8xFO) · 0 to before V3.3
Siemens
SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) · 0 to before V3.3
Siemens
SCALANCE XRM334 (24 V DC, 12xFO) · 0 to before V3.3
Siemens
SCALANCE XRM334 (24 V DC, 8xFO) · 0 to before V3.3
Siemens
SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) · 0 to before V3.3
Siemens
SCALANCE XRM334 (2x230 V AC, 12xFO) · 0 to before V3.3
Siemens
SCALANCE XRM334 (2x230 V AC, 8xFO) · 0 to before V3.3
Siemens
SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) · 0 to before V3.3
Siemens
SIMATIC CN 4100 · 0 to before V5.0
Siemens
Component: Not specified by the source
File: net/wireless/scan.c
Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-416
- CCR priority
- 31.3 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · NVD
- EPSS
- 0.00235 · percentile 0.13453 · 2026-10-19
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-20 01:44:01.123206+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-39864.html