Get real-time updates on Telegram
CVE-2025-39971: Linux 4.17
CVE-2025-39971. CVSS 3.1 base score 8.8 (HIGH, Source advisory). EPSS 0.00154 (percentile 0.04172), scored 19-Oct-2026.
Affected technology
Linux · c27eac48160de72dee33d42b5a33cc7b8a2eb1f5 to before a6ff2af78343eceb0f77ab1a2fe802183bc21648, c27eac48160de72dee33d42b5a33cc7b8a2eb1f5 to before f5f91d164af22e7147130ef8bebbdb28d8ecc6e2, c27eac48160de72dee33d42b5a33cc7b8a2eb1f5 to before 1fa0aadade34481c567cdf4a897c0d4e4d548bd1, c27eac48160de72dee33d42b5a33cc7b8a2eb1f5 to before 8b9c7719b0987b1c6c5fc910599f3618a558dbde, c27eac48160de72dee33d42b5a33cc7b8a2eb1f5 to before 2cc26dac0518d2fa9b67ec813ee60e183480f98a, c27eac48160de72dee33d42b5a33cc7b8a2eb1f5 to before bfcc1dff429d4b99ba03e40ddacc68ea4be2b32b, c27eac48160de72dee33d42b5a33cc7b8a2eb1f5 to before 5c1f96123113e0bdc6d8dc2b0830184c93da9f65, c27eac48160de72dee33d42b5a33cc7b8a2eb1f5 to before f1ad24c5abe1eaef69158bac1405a74b3c365115
Linux
Linux · 4.17
Linux
Component: Not specified by the source
File: drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 35.2 /100 (P4)
- CVSS 3.1
- 8.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00154 · percentile 0.04172 · 2026-10-19
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-20 01:44:01.123206+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-39971.html