CVE-2025-39965: linux kernel from 6.6.103 (inclusive), before 6.6.109 (exclusive), from 6.12.43 (inclusive), before 6.12.50…

Affected technology

linux kernel · from 6.6.103 (inclusive), before 6.6.109 (exclusive)
linux

linux kernel · from 6.12.43 (inclusive), before 6.12.50 (exclusive)
linux

linux kernel · from 6.15.11 (inclusive), before 6.16 (exclusive)
linux

linux kernel · from 6.16.2 (inclusive), before 6.16.10 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

linux kernel · 6.17 · update rc4
linux

linux kernel · 6.17 · update rc5
linux

linux kernel · 6.17 · update rc6
linux

linux kernel · 6.17 · update rc7
linux

Linux · 3d8090bb53424432fa788fe9a49e8ceca74f0544 to before 0baf92d0b1590b903c1f4ead75e61715e50e8146, 2fc5b54368a1bf1d2d74b4d3b8eea5309a653e38 to before 9fcedabaae0096f712bbb4ccca6a8538af1cd1c8, 29e9158f91f99057dbd35db5e8674d93b38549fe to before a78e55776522373c446f18d5002a8de4b09e6bf7, 94f39804d891cffe4ce17737d295f3b195bc7299 to before cd8ae32e4e4652db55bce6b9c79267d8946765a9, c67d4e7a8f90fb6361ca89d4d5c9a28f4e935e47, 6.15.11 to before 6.16
Linux

Linux · 6.6.103 to before 6.6.109, 6.12.43 to before 6.12.50, 6.16.2 to before 6.16.10
Linux

Component: Not specified by the source
File: net/xfrm/xfrm_state.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.