Get real-time updates on Telegram
CVE-2025-39907: linux kernel from 5.1 (inclusive), before 5.4.300 (exclusive), from 5.5 (inclusive), before 5.10.245 (exclusive), from…
CVE-2025-39907. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.0015 (percentile 0.03774), scored 19-Oct-2026.
Affected technology
linux kernel · from 5.1 (inclusive), before 5.4.300 (exclusive)
linux
linux kernel · from 5.5 (inclusive), before 5.10.245 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.194 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.153 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.107 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.48 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.16.8 (exclusive)
linux
linux kernel · 6.17 · update rc1
linux
linux kernel · 6.17 · update rc2
linux
linux kernel · 6.17 · update rc3
linux
linux kernel · 6.17 · update rc4
linux
linux kernel · 6.17 · update rc5
linux
debian linux · 11.0
debian
Linux · 2cd457f328c100bc98e36d55fe210e9ab067c704 to before dc1c6e60993b93b87604eb11266ac72e1a3be9e0, 2cd457f328c100bc98e36d55fe210e9ab067c704 to before dfe2ac47a6ee0ab50393694517c54ef1e276dda3, 2cd457f328c100bc98e36d55fe210e9ab067c704 to before e32a2ea52b51368774d014e5bcd9b86110a2b727, 2cd457f328c100bc98e36d55fe210e9ab067c704 to before 75686c49574dd5f171ca682c18717787f1d8d55e, 2cd457f328c100bc98e36d55fe210e9ab067c704 to before 06d8ef8f853752fea88c8d5bb093a40e71b330cf, 2cd457f328c100bc98e36d55fe210e9ab067c704 to before 26adba1e7d7924174e15a3ba4b1132990786300b, 2cd457f328c100bc98e36d55fe210e9ab067c704 to before f6fd98d961fa6f97347cead4f08ed862cbbb91ff, 2cd457f328c100bc98e36d55fe210e9ab067c704 to before 513c40e59d5a414ab763a9c84797534b5e8c208d
Linux
Linux · 5.1
Linux
Component: Not specified by the source
File: drivers/mtd/nand/raw/stm32_fmc2_nand.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 22.0 /100 (P4)
- CVSS 3.1
- 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
- EPSS
- 0.0015 · percentile 0.03774 · 2026-10-19
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-20 01:44:01.123206+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-39907.html