CYBER CODE RED

Get real-time updates on Telegram

P4

CVE-2025-39937: linux kernel from 4.6 (inclusive), before 5.4.300 (exclusive), from 5.5 (inclusive), before 5.10.245 (exclusive), from…

CVE-2025-39937. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00147 (percentile 0.03513), scored 19-Oct-2026.

Affected technology

linux kernel · from 4.6 (inclusive), before 5.4.300 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.245 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.194 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.154 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.108 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.49 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.9 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

linux kernel · 6.17 · update rc4
linux

linux kernel · 6.17 · update rc5
linux

linux kernel · 6.17 · update rc6
linux

Linux · 7d5e9737efda16535e5b54bd627ef4881d11d31f to before 184f608a68f96794e8fe58cd5535014d53622cde, 7d5e9737efda16535e5b54bd627ef4881d11d31f to before 8793e7a8e1b60131a825457174ed6398111daeb7, 7d5e9737efda16535e5b54bd627ef4881d11d31f to before ada2282259243387e6b6e89239aeb4897e62f051, 7d5e9737efda16535e5b54bd627ef4881d11d31f to before 47ade5f9d70b23a119ec20b1c6504864b2543a79, 7d5e9737efda16535e5b54bd627ef4881d11d31f to before 689aee35ce671aab752f159e5c8e66d7685e6887, 7d5e9737efda16535e5b54bd627ef4881d11d31f to before 21ba85d9d508422ca9e6698463ff9357c928c22d, 7d5e9737efda16535e5b54bd627ef4881d11d31f to before 21a39b958b4bcf44f7674bfbbe1bbb8cad0d842d, 7d5e9737efda16535e5b54bd627ef4881d11d31f to before b6f56a44e4c1014b08859dcf04ed246500e310e5
Linux

Linux · 4.6
Linux

Component: Not specified by the source
File: net/rfkill/rfkill-gpio.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-476
CCR priority
22.0 /100 (P4)
CVSS 3.1
5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS
0.00147 · percentile 0.03513 · 2026-10-19
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2025-39937.html