CVE-2025-39961: linux kernel 5.3; +1 more affected products

Affected technology

linux kernel · from 4.9.194 (inclusive), before 4.10 (exclusive)
linux

linux kernel · from 4.14.146 (inclusive), before 4.15 (exclusive)
linux

linux kernel · from 4.19.75 (inclusive), before 4.20 (exclusive)
linux

linux kernel · from 5.2.17 (inclusive), before 5.3 (exclusive)
linux

linux kernel · from 5.3.1 (inclusive), before 6.6.108 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.49 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.9 (exclusive)
linux

linux kernel · 5.3
linux

linux kernel · 5.3 · update rc8
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

linux kernel · 6.17 · update rc4
linux

linux kernel · 6.17 · update rc5
linux

linux kernel · 6.17 · update rc6
linux

Linux · 754265bcab78a9014f0f99cd35e0d610fcd7dfa7 to before 075abf0b1a958acfbea2435003d228e738e90346, 754265bcab78a9014f0f99cd35e0d610fcd7dfa7 to before cd92c8ab336c3a633d46e6f35ebcd3509ae7db3b, 754265bcab78a9014f0f99cd35e0d610fcd7dfa7 to before 7d462bdecb7d9c32934dab44aaeb7ea7d73a27a2, 754265bcab78a9014f0f99cd35e0d610fcd7dfa7 to before 1e56310b40fd2e7e0b9493da9ff488af145bdd0c, 6fb92f18555a7b8e085267d513612dc0ff9a5360, b15bf74405faa1a65025eb8a6eb337e140e5250a, 0d50f7b1e8c80a8c20db5049e269468c059b0378, 785ca708a908b9c596ede852470ba28b8dc3e40b, 4.9.194 to before 4.10, 4.14.146 to before 4.15, 4.19.75 to before 4.20, 5.2.17 to before 5.3
Linux

Linux · 5.3
Linux

Component: Not specified by the source
File: drivers/iommu/amd/amd_iommu_types.h, drivers/iommu/amd/io_pgtable.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.