CVE-2025-39883: linux kernel from 4.13 (inclusive), before 5.4.300 (exclusive), from 5.5 (inclusive), before 5.10.245 (exclusive)…

CVE-2025-39883. CVSS 3.1 base score 7.1 (HIGH, NVD). EPSS 0.00157 (percentile 0.04379), scored 19-Oct-2026.

Affected technology

linux kernel · from 4.13 (inclusive), before 5.4.300 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.245 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.194 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.153 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.107 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.48 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.8 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

linux kernel · 6.17 · update rc4
linux

linux kernel · 6.17 · update rc5
linux

debian linux · 11.0
debian

Linux · f1dd2cd13c4bbbc9a7c4617b3b034fa643de98fe to before 8e01ea186a52c90694c08a9ff57bea1b0e78256a, f1dd2cd13c4bbbc9a7c4617b3b034fa643de98fe to before fb65803ccff37cf9123c50c1c02efd1ed73c4ed5, f1dd2cd13c4bbbc9a7c4617b3b034fa643de98fe to before 99f7048957f5ae3cee1c01189147e73a9a96de02, f1dd2cd13c4bbbc9a7c4617b3b034fa643de98fe to before e4ec6def5643a1c9511115b3884eb879572294c6, f1dd2cd13c4bbbc9a7c4617b3b034fa643de98fe to before 3d278e89c2ea62b1aaa4b0d8a9766a35b3a3164a, f1dd2cd13c4bbbc9a7c4617b3b034fa643de98fe to before 7618fd443aa4cfa553a64cacf5721581653ee7b0, f1dd2cd13c4bbbc9a7c4617b3b034fa643de98fe to before 63a327a2375a8ce7a47dec5aaa4d8a9ae0a00b96, f1dd2cd13c4bbbc9a7c4617b3b034fa643de98fe to before d613f53c83ec47089c4e25859d5e8e0359f6f8da
Linux

Linux · 4.13
Linux

Component: Not specified by the source
File: mm/memory-failure.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 20-Oct-2026 01:47 UTC

CWE: CWE-125
CCR priority: 28.4 /100 (P4)
CVSS 3.1: 7.1 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H · NVD
EPSS: 0.00157 · percentile 0.04379 · 2026-10-19
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-20 01:44:01.123206+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2025-39883.html