Get real-time updates on Telegram
CVE-2025-39871: linux kernel 6.15; +4 more affected products
CVE-2025-39871. CVSS 3.1 base score 7.8 (HIGH, NVD). EPSS 0.00154 (percentile 0.04046), scored 14-Oct-2026.
Affected technology
linux kernel · from 6.1.140 (inclusive), before 6.2 (exclusive)
linux
linux kernel · from 6.6.92 (inclusive), before 6.6.107 (exclusive)
linux
linux kernel · from 6.12.30 (inclusive), before 6.12.48 (exclusive)
linux
linux kernel · from 6.14.8 (inclusive), before 6.15 (exclusive)
linux
linux kernel · from 6.15.1 (inclusive), before 6.16.8 (exclusive)
linux
linux kernel · 6.15
linux
linux kernel · 6.15 · update rc7
linux
linux kernel · 6.17 · update rc1
linux
linux kernel · 6.17 · update rc2
linux
linux kernel · 6.17 · update rc3
linux
linux kernel · 6.17 · update rc4
linux
linux kernel · 6.17 · update rc5
linux
Linux · 68ac5a01f635b3791196fd1c39bc48497252c36f to before 24414bbcb37e1af95190af36c21ae51d497e1a9e, d2d05fd0fc95c4defed6f7b87550e20e8baa1d97 to before 0e95ee7f532b21206fe3f1c4054002b0d21e3b9c, 21f9f5cd9a0c75084d4369ba0b8c4f695c41dea7 to before dd7a7e43269711d757fc260b0bbdf7138f75de11, d5449ff1b04dfe9ed8e455769aa01e4c2ccf6805 to before da4fbc1488a4cec6748da685181ee4449a878dac, d5449ff1b04dfe9ed8e455769aa01e4c2ccf6805 to before f41c538881eec4dcf5961a242097d447f848cda6, 2b7a961cea0e5b65afda911f76d14fec5c98d024, 6.1.140 to before 6.1.160, 6.6.92 to before 6.6.107, 6.12.30 to before 6.12.48, 6.14.8 to before 6.15
Linux
Linux · 6.15
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: drivers/dma/idxd/init.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
A local attacker with low privileges could trigger a use-after-free error. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not state a further attacker outcome.
- CWE
- CWE-416
- CCR priority
- 31.2 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · NVD
- EPSS
- 0.00154 · percentile 0.04046 · 2026-10-14
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-39871.html