CVE-2025-39902: linux kernel from 2.6.22 (inclusive), before 5.4.299 (exclusive), from 5.5 (inclusive), before 5.10.243 (exclusive)…

Affected technology

linux kernel · from 2.6.22 (inclusive), before 5.4.299 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.243 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.192 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.151 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.105 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.46 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.6 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

linux kernel · 6.17 · update rc4
linux

debian linux · 11.0
debian

Linux · 81819f0fc8285a2a5a921c019e3e3d7b6169d225 to before 872f2c34ff232af1e65ad2df86d61163c8ffad42, 81819f0fc8285a2a5a921c019e3e3d7b6169d225 to before f66012909e7bf383fcdc5850709ed5716073fdc4, 81819f0fc8285a2a5a921c019e3e3d7b6169d225 to before 7e287256904ee796c9477e3ec92b07f236481ef3, 81819f0fc8285a2a5a921c019e3e3d7b6169d225 to before 1f0797f17927b5cad0fb7eced422f9a7c30a3191, 81819f0fc8285a2a5a921c019e3e3d7b6169d225 to before 0ef7058b4dc6fcef622ac23b45225db57f17b83f, 81819f0fc8285a2a5a921c019e3e3d7b6169d225 to before dda6ec365ab04067adae40ef17015db447e90736, 81819f0fc8285a2a5a921c019e3e3d7b6169d225 to before 3baa1da473e6e50281324ff1d332d1a07a3bb02e, 81819f0fc8285a2a5a921c019e3e3d7b6169d225 to before b4efccec8d06ceb10a7d34d7b1c449c569d53770
Linux

Linux · 2.6.22
Linux

Component: Not specified by the source
File: mm/slub.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.