Get real-time updates on Telegram
CVE-2025-40088: Linux 2.6.12
CVE-2025-40088. CVSS 3.1 base score 7.1 (HIGH, Source advisory). EPSS 0.0015 (percentile 0.03801), scored 19-Oct-2026.
Affected technology
Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 603158d4efa98a13a746bd586c20f194f4a31ec8, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ef250c3edd995d7bb5a5e5122ffad1c28a8686eb, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7ab44236b32ed41eb0636797e8e8e885a2f3b18a, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b47a75b6f762321f9eb6f31aab7bce47a37063b7, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 4f5ab4a9c6abd8b0d713cc2b7b041bc10d70f241, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 586c75dfd1d265c4150f6529debb85c9d62e101f, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 4bc081ba6c52b0c88c92701e3fbc33c7e2277afb, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 42520df65bf67189541a425f7d36b0b3e7bd7844
Linux
Linux · 2.6.12
Linux
Component: Not specified by the source
File: fs/hfsplus/unicode.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 28.4 /100 (P4)
- CVSS 3.1
- 7.1 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H · Source advisory
- EPSS
- 0.0015 · percentile 0.03801 · 2026-10-19
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-20 01:44:01.123206+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-40088.html