CYBER CODE RED

Get real-time updates on Telegram

P4

CVE-2025-39913: linux kernel from 4.17 (inclusive), before 5.4.300 (exclusive), from 5.5 (inclusive), before 5.10.245 (exclusive)…

CVE-2025-39913. CVSS 3.1 base score 7.8 (HIGH, NVD). EPSS 0.00183 (percentile 0.07424), scored 19-Oct-2026.

Affected technology

linux kernel · from 4.17 (inclusive), before 5.4.300 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.245 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.194 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.153 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.107 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.48 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.8 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

linux kernel · 6.17 · update rc4
linux

linux kernel · 6.17 · update rc5
linux

debian linux · 11.0
debian

Linux · 4f738adba30a7cfc006f605707e7aee847ffefa0 to before 08f58d10f5abf11d297cc910754922498c921f91, 4f738adba30a7cfc006f605707e7aee847ffefa0 to before 05366527f44cf4b884f3d9462ae8009be9665856, 4f738adba30a7cfc006f605707e7aee847ffefa0 to before 7429b8b9bfbc276fd304fbaebc405f46b421fedf, 4f738adba30a7cfc006f605707e7aee847ffefa0 to before 9c2a6456bdf9794474460d885c359b6c4522d6e3, 4f738adba30a7cfc006f605707e7aee847ffefa0 to before 66bcb04a441fbf15d66834b7e3eefb313dd750c8, 4f738adba30a7cfc006f605707e7aee847ffefa0 to before 539920180c55f5e13a2488a2339f94e6b8cb69e0, 4f738adba30a7cfc006f605707e7aee847ffefa0 to before de89e58368f8f07df005ecc1c86ad94898a999f2, 4f738adba30a7cfc006f605707e7aee847ffefa0 to before a3967baad4d533dc254c31e0d221e51c8d223d58
Linux

Linux · 4.17
Linux

RUGGEDCOM RST2428P · 0 to before V4.0
Siemens

Component: Not specified by the source
File: net/ipv4/tcp_bpf.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CCR priority
31.2 /100 (P4)
CVSS 3.1
7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · NVD
EPSS
0.00183 · percentile 0.07424 · 2026-10-19
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2025-39913.html