Get real-time updates on Telegram
CVE-2025-40094: Linux 2.6.27
CVE-2025-40094. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00154 (percentile 0.04171), scored 19-Oct-2026.
Affected technology
Linux · 1f1ba11b64947051fc32aa15fcccef6463b433f7 to before c5d116862dd3ed162d079738a5ebddf9fceea850, 1f1ba11b64947051fc32aa15fcccef6463b433f7 to before 2b1546f7c5fc6c44555a8e7a2b34229d1dcd2175, 1f1ba11b64947051fc32aa15fcccef6463b433f7 to before e348d18fb0124b662cfefb3001733b49da428215, 1f1ba11b64947051fc32aa15fcccef6463b433f7 to before 201a66d8e6630762e760e1d78f1d149da1691e7b, 1f1ba11b64947051fc32aa15fcccef6463b433f7 to before c4301e4dd6b32faccb744f1c2320e64235b68d3b, 1f1ba11b64947051fc32aa15fcccef6463b433f7 to before 47b2116e54b4a854600341487e8b55249e926324
Linux
Linux · 2.6.27
Linux
Component: Not specified by the source
File: drivers/usb/gadget/function/f_acm.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 31.2 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00154 · percentile 0.04171 · 2026-10-19
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-20 01:44:01.123206+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-40094.html