CVE-2025-39894: linux kernel 6.8; +2 more affected products

Affected technology

linux kernel · from 5.15.151 (inclusive), before 5.15.192 (exclusive)
linux

linux kernel · from 6.1.81 (inclusive), before 6.1.151 (exclusive)
linux

linux kernel · from 6.6.21 (inclusive), before 6.6.105 (exclusive)
linux

linux kernel · from 6.7.9 (inclusive), before 6.8 (exclusive)
linux

linux kernel · from 6.8.1 (inclusive), before 6.12.46 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.6 (exclusive)
linux

linux kernel · 6.8
linux

linux kernel · 6.8 · update rc7
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

linux kernel · 6.17 · update rc4
linux

debian linux · 11.0
debian

Linux · 7c3f28599652acf431a2211168de4a583f30b6d5 to before d00c8b0daf56012f69075e3377da67878c775e4c, 2b1414d5e94e477edff1d2c79030f1d742625ea0 to before ccbad4803225eafe0175d3cb19f0d8d73b504a94, 80cd0487f630b5382734997c3e5e3003a77db315 to before 50db11e2bbb635e38e3dd096215580d6adb41fb0, 62e7151ae3eb465e0ab52a20c941ff33bb6332e9 to before c47ca77fee9071aa543bae592dd2a384f895c8b6, 62e7151ae3eb465e0ab52a20c941ff33bb6332e9 to before a74abcf0f09f59daeecf7a3ba9c1d690808b0afe, 62e7151ae3eb465e0ab52a20c941ff33bb6332e9 to before 479a54ab92087318514c82428a87af2d7af1a576, cb734975b0ffa688ff6cc0eed463865bf07b6c01, 5.15.151 to before 5.15.192, 6.1.81 to before 6.1.151, 6.6.21 to before 6.6.105, 6.7.9 to before 6.8
Linux

Linux · 6.8
Linux

Component: Not specified by the source
File: net/bridge/br_netfilter_hooks.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.