CVE-2025-39920: linux kernel from 2.6.34 (inclusive), before 5.4.299 (exclusive), from 5.5 (inclusive), before 5.10.243 (exclusive)…

CVE-2025-39920. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00163 (percentile 0.05204), scored 19-Oct-2026.

Affected technology

linux kernel · from 2.6.34 (inclusive), before 5.4.299 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.243 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.192 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.151 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.105 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.46 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.6 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

linux kernel · 6.17 · update rc4
linux

debian linux · 11.0
debian

Linux · 7b4884ca8853a638df0eb5d251d80d67777b8b1a to before 5b60ed401b47897352c520bc724c85aa908dedcc, 7b4884ca8853a638df0eb5d251d80d67777b8b1a to before ae184024ef31423e5beb44cf4f52999bbcf2fe5b, 7b4884ca8853a638df0eb5d251d80d67777b8b1a to before 85be7ef8c8e792a414940a38d94565dd48d2f236, 7b4884ca8853a638df0eb5d251d80d67777b8b1a to before 06b26e3099207c94b3d1be8565aedc6edc4f0a60, 7b4884ca8853a638df0eb5d251d80d67777b8b1a to before 8699358b6ac99b8ccc97ed9e6e3669ef8958ef7b, 7b4884ca8853a638df0eb5d251d80d67777b8b1a to before 289b58f8ff3198d091074a751d6b8f6827726f3e, 7b4884ca8853a638df0eb5d251d80d67777b8b1a to before 369bf6e241506583f4ee7593c53b92e5a9f271b4, 7b4884ca8853a638df0eb5d251d80d67777b8b1a to before 4a81f78caa53e0633cf311ca1526377d9bff7479
Linux

Linux · 2.6.34
Linux

Component: Not specified by the source
Function: will
File: drivers/pcmcia/rsrc_nonstatic.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 20-Oct-2026 01:48 UTC

CWE: CWE-476
CCR priority: 22.0 /100 (P4)
CVSS 3.1: 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS: 0.00163 · percentile 0.05204 · 2026-10-19
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-20 01:44:01.123206+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2025-39920.html