Get real-time updates on Telegram
CVE-2025-39994: Linux 3.16
CVE-2025-39994. CVSS 3.1 base score 7.3 (HIGH, Source advisory). EPSS 0.00155 (percentile 0.04221), scored 14-Oct-2026.
Affected technology
Linux · f7a27ff1fb77e114d1059a5eb2ed1cffdc508ce8 to before bc4ffd962ce16a154c44c68853b9d93f5b6fc4b8, f7a27ff1fb77e114d1059a5eb2ed1cffdc508ce8 to before e2f5eaafc0306a76fb1cb760aae804b065b8a341, f7a27ff1fb77e114d1059a5eb2ed1cffdc508ce8 to before 3f876cd47ed8bca1e28d68435845949f51f90703, f7a27ff1fb77e114d1059a5eb2ed1cffdc508ce8 to before df0303b4839520b84d9367c2fad65b13650a4d42, f7a27ff1fb77e114d1059a5eb2ed1cffdc508ce8 to before 71ed8b81a4906cb785966910f39cf7f5ad60a69e, f7a27ff1fb77e114d1059a5eb2ed1cffdc508ce8 to before effb1c19583bca7022fa641a70766de45c6d41ac, f7a27ff1fb77e114d1059a5eb2ed1cffdc508ce8 to before 9a00de20ed8ba90888479749b87bc1532cded4ce, f7a27ff1fb77e114d1059a5eb2ed1cffdc508ce8 to before 4266f012806fc18e46da4a04d130df59a4946f93, f7a27ff1fb77e114d1059a5eb2ed1cffdc508ce8 to before 40b7a19f321e65789612ebaca966472055dab48c
Linux
Linux · 3.16
Linux
Component: Not specified by the source
File: drivers/media/tuners/xc5000.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · User interaction required
What an attacker can do
A local attacker with low privileges could trigger a use-after-free error. Source advisory’s CVSS 3.1 assessment (base score 7.3/10) rates confidentiality, integrity and availability impact as high. The description does not state a further attacker outcome.
- CCR priority
- 29.2 /100 (P4)
- CVSS 3.1
- 7.3 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00155 · percentile 0.04221 · 2026-10-14
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-15 22:58:54.984414+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-39994.html