Get real-time updates on Telegram
CVE-2025-39975: Linux 6.14
CVE-2025-39975. CVSS 3.1 base score 9.8 (CRITICAL, Source advisory). EPSS 0.00467 (percentile 0.39105), scored 19-Oct-2026.
Affected technology
Linux · 5ddcc9e92d54548219985ce4de88618fb53e14ec to before ba7bcfd52c66dd1c2dfa5142aca7e4a70b62dfa5, efe8db3ecaa40a8520dc9a54283dcecd82ceea9c to before bfb1e2aad1fecef8320fd71332acde0d53a8d699, 3681c74d342db75b0d641ba60de27bf73e16e66b to before 093615fc76063ea08d454ba86677ce64c736e806, 3681c74d342db75b0d641ba60de27bf73e16e66b to before fbe2dc6a9c7318f7263f5e4d50f6272b931c5756, 77aefd1d9b790f60634adebbdcfffbe934f41c34, 6.6.75 to before 6.6.109, 6.12.12 to before 6.12.50, 6.13.1 to before 6.14
Linux
Linux · 6.14
Linux
Component: Not specified by the source
File: fs/smb/client/smb2inode.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 39.3 /100 (P4)
- CVSS 3.1
- 9.8 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00467 · percentile 0.39105 · 2026-10-19
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-20 01:44:01.123206+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-39975.html