CVE-2025-39885: linux kernel from 2.6.28 (inclusive), before 5.4.300 (exclusive), from 5.5 (inclusive), before 5.10.245 (exclusive)…

CVE-2025-39885. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.0012 (percentile 0.01704), scored 19-Oct-2026.

Affected technology

linux kernel · from 2.6.28 (inclusive), before 5.4.300 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.245 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.194 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.153 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.107 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.48 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.8 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

linux kernel · 6.17 · update rc4
linux

linux kernel · 6.17 · update rc5
linux

debian linux · 11.0
debian

Linux · 00dc417fa3e763345b34ccb6034d72de76eea0a1 to before 16e518ca84dfe860c20a62f3615e14e8af0ace57, 00dc417fa3e763345b34ccb6034d72de76eea0a1 to before 7e1514bd44ef68007703c752c99ff7319f35bce6, 00dc417fa3e763345b34ccb6034d72de76eea0a1 to before ef30404980e4c832ef9bba1b10c08f67fa77a9ec, 00dc417fa3e763345b34ccb6034d72de76eea0a1 to before 36054554772f95d090eb45793faf6aa3c0254b02, 00dc417fa3e763345b34ccb6034d72de76eea0a1 to before 0709bc11b942870fc0a7be150e42aea42321093a, 00dc417fa3e763345b34ccb6034d72de76eea0a1 to before 1d3c96547ee2ddeaddf8f19a3ef99ea06cc8115e, 00dc417fa3e763345b34ccb6034d72de76eea0a1 to before 9efcb7a8b97310efed995397941a292cf89fa94f, 00dc417fa3e763345b34ccb6034d72de76eea0a1 to before 04100f775c2ea501927f508f17ad824ad1f23c8d
Linux

Linux · 2.6.28
Linux

Component: Not specified by the source
File: fs/ocfs2/extent_map.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 20-Oct-2026 01:48 UTC

CWE: CWE-667
CCR priority: 22.0 /100 (P4)
CVSS 3.1: 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS: 0.0012 · percentile 0.01704 · 2026-10-19
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-20 01:44:01.123206+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2025-39885.html