CVE-2025-39865: linux kernel 5.16; +19 more affected products

Affected technology

linux kernel · from 4.14.261 (inclusive), before 4.15 (exclusive)
linux

linux kernel · from 4.19.224 (inclusive), before 4.20 (exclusive)
linux

linux kernel · from 5.4.170 (inclusive), before 5.5 (exclusive)
linux

linux kernel · from 5.10.89 (inclusive), before 5.10.243 (exclusive)
linux

linux kernel · from 5.15.12 (inclusive), before 5.15.192 (exclusive)
linux

linux kernel · from 5.16.1 (inclusive), before 6.1.151 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.105 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.46 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.6 (exclusive)
linux

linux kernel · 5.16
linux

linux kernel · 5.16 · update rc7
linux

linux kernel · 5.16 · update rc8
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

linux kernel · 6.17 · update rc4
linux

debian linux · 11.0
debian

Linux · c05d8f66ec3470e5212c4d08c46d6cb5738d600d to before f266188603c34e6e234fb0dfc3185f0ba98d71b7, 492eb7afe858d60408b2da09adc78540c4d16543 to before 4377eac565c297fdfccd2f8e9bf94ee84ff6172f, dfd0743f1d9ea76931510ed150334d571fbab49d to before 25e315bc8ad363bd1194e49062f183ad4011957e, dfd0743f1d9ea76931510ed150334d571fbab49d to before add1ecc8f3ad8df22e3599c5c88d7907cc2a3079, dfd0743f1d9ea76931510ed150334d571fbab49d to before 963fca19fe34c496e04f7dd133b807b76a5434ca, dfd0743f1d9ea76931510ed150334d571fbab49d to before 5e07a4235bb85d9ef664411e4ff4ac34783c18ff, dfd0743f1d9ea76931510ed150334d571fbab49d to before e4a718a3a47e89805c3be9d46a84de1949a98d5d, 3d556a28bbfe34a80b014db49908b0f1bcb1ae80, b4a661b4212b8fac8853ec3b68e4a909dccc88a1, 940e68e57ab69248fabba5889e615305789db8a7, 5.10.89 to before 5.10.243, 5.15.12 to before 5.15.192, 4.14.261 to before 4.15, 4.19.224 to before 4.20, 5.4.170 to before 5.5
Linux

Linux · 5.16
Linux

RUGGEDCOM RST2428P · 0 to before V3.3
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.3
Siemens

SCALANCE XCH328 · 0 to before V3.3
Siemens

SCALANCE XCM324 · 0 to before V3.3
Siemens

SCALANCE XCM328 · 0 to before V3.3
Siemens

SCALANCE XCM332 · 0 to before V3.3
Siemens

SCALANCE XRH334 (24 V DC, 8xFO, CC) · 0 to before V3.3
Siemens

SCALANCE XRM334 (230 V AC, 12xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (230 V AC, 8xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) · 0 to before V3.3
Siemens

SCALANCE XRM334 (24 V DC, 12xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (24 V DC, 8xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) · 0 to before V3.3
Siemens

SCALANCE XRM334 (2x230 V AC, 12xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (2x230 V AC, 8xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) · 0 to before V3.3
Siemens

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Component: Not specified by the source
File: drivers/tee/tee_shm.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.