CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2025-40300: linux kernel from 3.16.57 (inclusive), before 3.17 (exclusive), from 4.4.168 (inclusive), before 4.5 (exclusive), from…

CVE-2025-40300. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00352 (percentile 0.27127), scored 14-Oct-2026.

Affected technology

linux kernel · from 3.16.57 (inclusive), before 3.17 (exclusive)
linux

linux kernel · from 4.4.168 (inclusive), before 4.5 (exclusive)
linux

linux kernel · from 4.16 (inclusive), before 5.10.244 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.193 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.152 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.106 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.47 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.16.7 (exclusive)
linux

linux kernel · 6.17 · update rc1
linux

linux kernel · 6.17 · update rc2
linux

linux kernel · 6.17 · update rc3
linux

linux kernel · 6.17 · update rc4
linux

linux kernel · 6.17 · update rc5
linux

debian linux · 11.0
debian

Linux · 15d45071523d89b3fb7372e2135fbd72f6af9506 to before ac60717f9a8d21c58617d0b34274babf24135835, 15d45071523d89b3fb7372e2135fbd72f6af9506 to before c08192b5d6730a914dee6175bc71092ee6a65f14, 15d45071523d89b3fb7372e2135fbd72f6af9506 to before d5490dfa35427a2967e00a4c7a1b95fdbc8ede34, 15d45071523d89b3fb7372e2135fbd72f6af9506 to before 2f4f2f8f860cb4c3336a7435ebe8dcfded0c9c6e, 15d45071523d89b3fb7372e2135fbd72f6af9506 to before 15006289e5c38b2a830e1fba221977a27598176c, 15d45071523d89b3fb7372e2135fbd72f6af9506 to before 893387c18612bb452336a5881da0d015a7e8f4a2, 15d45071523d89b3fb7372e2135fbd72f6af9506 to before f866eef8d1c65504d30923c3f14082ad294d0e6d, 15d45071523d89b3fb7372e2135fbd72f6af9506 to before 34e5667041050711a947e260fc9ebebe08bddee5, 15d45071523d89b3fb7372e2135fbd72f6af9506 to before d7ddc93392e4a7ffcccc86edf6ef3e64c778db52, 15d45071523d89b3fb7372e2135fbd72f6af9506 to before 459274c77b37ac63b78c928b4b4e748d1f9d05c8, 15d45071523d89b3fb7372e2135fbd72f6af9506 to before 510603f504796c3535f67f55fb0b124a303b44c8, 15d45071523d89b3fb7372e2135fbd72f6af9506 to before 9c23a90648e831d611152ac08dbcd1283d405e7f, 15d45071523d89b3fb7372e2135fbd72f6af9506 to before 2f8f173413f1cbf52660d04df92d0069c4306d25, c51f1e5f57cca88d8d5894b6fad1638f643a99d0, 4b3870c343a82cd2df7192cc5149c87205dcc611, 3.16.57 to before 3.17, 4.4.168 to before 4.5
Linux

Linux · 4.16
Linux

SIMATIC CN 4100 · 0 to before V5.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: arch/x86/include/asm/cpufeatures.h, arch/x86/include/asm/entry-common.h, arch/x86/include/asm/nospec-branch.h, arch/x86/kernel/cpu/bugs.c, arch/x86/kvm/x86.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CCR priority
22.1 /100 (P4)
CVSS 3.1
5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS
0.00352 · percentile 0.27127 · 2026-10-14
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2025-40300.html