CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2025-39871: linux kernel 6.15; +4 more affected products

CVE-2025-39871. CVSS 3.1 base score 7.8 (HIGH, NVD). EPSS 0.00154 (percentile 0.04046), scored 14-Oct-2026.

Affected technology

linux kernel · from 6.1.140 (inclusive), before 6.2 (exclusive)
linux

linux kernel · from 6.6.92 (inclusive), before 6.6.107 (exclusive)
linux

linux kernel · from 6.12.30 (inclusive), before 6.12.48 (exclusive)
linux

linux kernel · from 6.14.8 (inclusive), before 6.15 (exclusive)
linux

linux kernel · from 6.15.1 (inclusive), before 6.16.8 (exclusive)
linux

linux kernel · 6.15
linux

linux kernel · 6.15 · update rc7
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

linux kernel · 6.17 · update rc4
linux

linux kernel · 6.17 · update rc5
linux

Linux · 68ac5a01f635b3791196fd1c39bc48497252c36f to before 24414bbcb37e1af95190af36c21ae51d497e1a9e, d2d05fd0fc95c4defed6f7b87550e20e8baa1d97 to before 0e95ee7f532b21206fe3f1c4054002b0d21e3b9c, 21f9f5cd9a0c75084d4369ba0b8c4f695c41dea7 to before dd7a7e43269711d757fc260b0bbdf7138f75de11, d5449ff1b04dfe9ed8e455769aa01e4c2ccf6805 to before da4fbc1488a4cec6748da685181ee4449a878dac, d5449ff1b04dfe9ed8e455769aa01e4c2ccf6805 to before f41c538881eec4dcf5961a242097d447f848cda6, 2b7a961cea0e5b65afda911f76d14fec5c98d024, 6.1.140 to before 6.1.160, 6.6.92 to before 6.6.107, 6.12.30 to before 6.12.48, 6.14.8 to before 6.15
Linux

Linux · 6.15
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: drivers/dma/idxd/init.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

A local attacker with low privileges could trigger a use-after-free error. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not state a further attacker outcome.

Published

CWE
CWE-416
CCR priority
31.2 /100 (P4)
CVSS 3.1
7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · NVD
EPSS
0.00154 · percentile 0.04046 · 2026-10-14
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2025-39871.html