Get real-time updates on Telegram
CVE-2025-40167: Linux 3.8
CVE-2025-40167. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00165 (percentile 0.05404), scored 14-Oct-2026.
Affected technology
Linux · f19d5870cbf72d4cb2a8e1f749dff97af99b071e to before 4954d297c91d292630ab43ba4d195dc371ce65d3, f19d5870cbf72d4cb2a8e1f749dff97af99b071e to before f061f7c331fc16250fc82aa68964f35821687217, f19d5870cbf72d4cb2a8e1f749dff97af99b071e to before 2e9e10657b04152ed0d6ecae8d0c02a3405e28f5, f19d5870cbf72d4cb2a8e1f749dff97af99b071e to before 1437c95ab2a28b138d4521653583729f61ccb48b, f19d5870cbf72d4cb2a8e1f749dff97af99b071e to before cb6039b68efa547b676a8a10fc4618d9d1865c23, f19d5870cbf72d4cb2a8e1f749dff97af99b071e to before de985264eef64be8a90595908f2e6a87946dad34, f19d5870cbf72d4cb2a8e1f749dff97af99b071e to before 1f5ccd22ff482639133f2a0fe08f6d19d0e68717, f19d5870cbf72d4cb2a8e1f749dff97af99b071e to before 1d3ad183943b38eec2acf72a0ae98e635dc8456b
Linux
Linux · 3.8
Linux
Component: Not specified by the source
File: fs/ext4/inode.c
Attack conditions (Source advisory, CVSS 3.1): Local · No privileges required · User interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 31.2 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00165 · percentile 0.05404 · 2026-10-14
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-15 22:58:54.984414+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-40167.html