CVE-2025-39911: linux kernel from 3.13 (inclusive), before 5.4.300 (exclusive), from 5.5 (inclusive), before 5.10.245 (exclusive)…

CVE-2025-39911. CVSS 3.1 base score 7.8 (HIGH, NVD). EPSS 0.00157 (percentile 0.04452), scored 19-Oct-2026.

Affected technology

linux kernel · from 3.13 (inclusive), before 5.4.300 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.245 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.194 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.153 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.107 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.48 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.8 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

linux kernel · 6.17 · update rc4
linux

linux kernel · 6.17 · update rc5
linux

debian linux · 11.0
debian

Linux · 493fb30011b3ab5173cef96f1d1ce126da051792 to before 13ab9adef3cd386511c930a9660ae06595007f89, 493fb30011b3ab5173cef96f1d1ce126da051792 to before 6e4016c0dca53afc71e3b99e24252b63417395df, 493fb30011b3ab5173cef96f1d1ce126da051792 to before b9721a023df38cf44a88f2739b4cf51efd051f85, 493fb30011b3ab5173cef96f1d1ce126da051792 to before b905b2acb3a0bbb08ad9be9984d8cdabdf827315, 493fb30011b3ab5173cef96f1d1ce126da051792 to before 23431998a37764c464737b855c71a81d50992e98, 493fb30011b3ab5173cef96f1d1ce126da051792 to before a30afd6617c30aaa338d1dbcb1e34e7a1890085c, 493fb30011b3ab5173cef96f1d1ce126da051792 to before c62580674ce5feb1be4f90b5873ff3ce50e0a1db, 493fb30011b3ab5173cef96f1d1ce126da051792 to before 915470e1b44e71d1dd07ee067276f003c3521ee3
Linux

Linux · 3.13
Linux

Component: Not specified by the source
File: drivers/net/ethernet/intel/i40e/i40e_main.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 20-Oct-2026 01:47 UTC

CCR priority: 31.2 /100 (P4)
CVSS 3.1: 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · NVD
EPSS: 0.00157 · percentile 0.04452 · 2026-10-19
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-20 01:44:01.123206+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2025-39911.html