Get real-time updates on Telegram
CVE-2025-39993: Linux 2.6.35
CVE-2025-39993. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00157 (percentile 0.04405), scored 19-Oct-2026.
Affected technology
Linux · 21677cfc562a27e099719d413287bc8d1d24deb7 to before 9348976003e39754af344949579e824a0a210fc4, 21677cfc562a27e099719d413287bc8d1d24deb7 to before b03fac6e2a38331faf8510b480becfa90cea1c9f, 21677cfc562a27e099719d413287bc8d1d24deb7 to before 71c52b073922d05e79e6de7fc7f5f38f927929a4, 21677cfc562a27e099719d413287bc8d1d24deb7 to before 71096a6161a25e84acddb89a9d77f138502d26ab, 21677cfc562a27e099719d413287bc8d1d24deb7 to before 71da40648741d15b302700b68973fe8b382aef3c, 21677cfc562a27e099719d413287bc8d1d24deb7 to before fd5d3e6b149ec8cce045d86a2b5e3664d6b32ba5, 21677cfc562a27e099719d413287bc8d1d24deb7 to before d9f6ce99624a41c3bcb29a8d7d79b800665229dd, 21677cfc562a27e099719d413287bc8d1d24deb7 to before 2e7fd93b9cc565b839bc55a6662475718963e156, 21677cfc562a27e099719d413287bc8d1d24deb7 to before fa0f61cc1d828178aa921475a9b786e7fbb65ccb
Linux
Linux · 2.6.35
Linux
Component: Not specified by the source
File: drivers/media/rc/imon.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
A local attacker with low privileges can trigger a use-after-free error. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not state a further attacker outcome.
- CCR priority
- 31.2 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00157 · percentile 0.04405 · 2026-10-19
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-20 01:44:01.123206+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-39993.html