CVE-2025-39925 json
can: j1939: implement NETDEV_UNREGISTER notification handler
published last yr. modified 21d ago also EUVD-2025-32878
- cvss
- 5.5
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.2%
- EPSS 0.2% chance of exploitation in 30 days, percentile 4%
- public exploits
- 0
- none known
Summary
In the Linux kernel, the following vulnerability has been resolved:
can: j1939: implement NETDEV_UNREGISTER notification handler
syzbot is reporting
unregister_netdevice: waiting for vcan0 to become free. Usage count = 2
problem, for j1939 protocol did not have NETDEV_UNREGISTER notification handler for undoing changes made by j1939_sk_bind().
Commit 25fe97cb7620 ("can: j1939: move j1939_priv_put() into sk_destruct callback") expects that a call to j1939_priv_put() can be unconditionally delayed until j1939_sk_sock_destruct() is called. But we need to call j1939_priv_put() against an extra ref held by j1939_sk_bind() call (as a part of undoing changes made by j1939_sk_bind()) as soon as NETDEV_UNREGISTER notification fires (i.e. before j1939_sk_sock_destruct() is called via j1939_sk_release()). Otherwise, the extra ref on "struct j1939_priv" held by j1939_sk_bind() call prevents "struct net_device" from dropping the usage count to 1; making it impossible for unregister_netdevice() to continue.
[mkl: remove space in front of label]
Patch / fix
- Linux Linux 5.15.220, 6.1.187, 6.6.156, 6.12.108, 6.16.8, 6.17
- linux Debian 12 6.1.187-1
- linux Debian 13 6.12.111-1
- linux Debian 14 6.16.8-1
- linux-6.12 Debian 12 6.12.111-1~deb12u1
debian advisories DEBIAN-CVE-2025-39925
- linux Ubuntu 22.04 LTS 5.15.0-202.212
- linux-aws Ubuntu 22.04 LTS 5.15.0-1119.126
- linux-gcp Ubuntu 22.04 LTS 5.15.0-1120.130
- linux-gke Ubuntu 22.04 LTS 5.15.0-1115.121
- linux-ibm Ubuntu 22.04 LTS 5.15.0-1113.117
- linux-kvm Ubuntu 22.04 LTS 5.15.0-1111.116
- linux-azure Ubuntu 22.04 LTS 5.15.0-1125.134
- linux-gkeop Ubuntu 22.04 LTS 5.15.0-1102.110
ubuntu advisories UBUNTU-CVE-2025-39925
Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
- kernel RHEL 9 5.14.0-611.13.1.el9_7
- rv RHEL 9 5.14.0-611.13.1.el9_7
- perf RHEL 9 5.14.0-611.13.1.el9_7
- rtla RHEL 9 5.14.0-611.13.1.el9_7
- libperf RHEL 9 5.14.0-611.13.1.el9_7
- kernel-rt RHEL 9 5.14.0-611.13.1.el9_7
- kernel-64k RHEL 9 5.14.0-611.13.1.el9_7
- kernel-core RHEL 9 5.14.0-611.13.1.el9_7
red hat advisories RHSA-2026:0576RHSA-2026:0537RHSA-2026:0535RHSA-2026:0534RHSA-2026:0271RHSA-2026:0173
- kernel-rt Linux Micro 6.2 6.12.0-160000.6.1
- kernel-64kb SLES 16.0, Linux Micro 6.2, SLES for SAP applications 16.0 6.12.0-160000.6.1
- kernel-source SLES 16.0, Linux Micro 6.2, SLES for SAP applications 16.0 6.12.0-160000.6.1
- kernel-default SLES 16.0, SLE High Availability Extension 16.0, Linux Micro 6.2 +1 more 6.12.0-160000.6.1
- kernel-default-base SLES 16.0, Linux Micro 6.2, SLES for SAP applications 16.0 6.12.0-160000.6.1.160000.2.4
- kernel-syms SLES 16.0, Linux Micro Extras 6.2, SLES for SAP applications 16.0 6.12.0-160000.6.1
- kernel-obs-qa SLES for SAP applications 16.0, SLES 16.0 6.12.0-160000.6.1
- kernel-kvmsmall SLES for SAP applications 16.0, SLES 16.0 6.12.0-160000.6.1
suse advisories SUSE-SU-2025:21074-1SUSE-SU-2025:21139-1SUSE-SU-2026:20560-1SUSE-SU-2025:21179-1SUSE-SU-2025:4141-1SUSE-SU-2025:4132-1
- kernel-rt openSUSE Leap 16.0 6.12.0-160000.6.1
- dtb-aarch64 openSUSE Leap 16.0 6.12.0-160000.6.1
- kernel-64kb openSUSE Leap 16.0 6.12.0-160000.6.1
- kernel-syms openSUSE Leap 16.0 6.12.0-160000.6.1
- kernel-obs-qa openSUSE Leap 16.0 6.12.0-160000.6.1
- kernel-source openSUSE Leap 16.0 6.12.0-160000.6.1
- kernel-default openSUSE Leap 16.0 6.12.0-160000.6.1
- kernel-kvmsmall openSUSE Leap 16.0 6.12.0-160000.6.1
opensuse advisories openSUSE-SU-2025:20081-1
- kernel-abi-stablelists AlmaLinux 10 6.12.0-124.20.1.el10_1
- kernel AlmaLinux 9 5.14.0-611.13.1.el9_7
- rv AlmaLinux 9 5.14.0-611.13.1.el9_7
- perf AlmaLinux 9 5.14.0-611.13.1.el9_7
- rtla AlmaLinux 9 5.14.0-611.13.1.el9_7
- libperf AlmaLinux 9 5.14.0-611.13.1.el9_7
- kernel-rt AlmaLinux 9 5.14.0-611.13.1.el9_7
- kernel-64k AlmaLinux 9 5.14.0-611.13.1.el9_7
almalinux advisories ALSA-2025:22854ALSA-2025:22865
- kernel Rocky Linux 10 6.12.0-124.20.1.el10_1
- kernel Rocky Linux 9 5.14.0-611.13.1.el9_7
rocky linux advisories RLSA-2025:22854RLSA-2025:22865
- git.kernel.org/stable/c/479d8a2aedcc1db16f14c1a8a9c74b5bdf18b9ac commit
- git.kernel.org/stable/c/2c88069fac2c792e228e6a4ae71c9b9b5b9a87a6 commit
- git.kernel.org/stable/c/76957b618ce729c3bd1e782fbc9d9991af653925 commit
- git.kernel.org/stable/c/4e154cb5e7681c2910e2dfa09f05e3469e333745 commit
- git.kernel.org/stable/c/da9e8f429139928570407e8f90559b5d46c20262 commit
- git.kernel.org/stable/c/7fcbe5b2c6a4b5407bf2241fdb71e0a390f6ab9a commit
Is CVE-2025-39925 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.
Check with FencerVendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2025-39925 updated cvss 4.9
kernel: can: j1939: implement NETDEV_UNREGISTER notification handler
-
Red Hat Enterprise Linux 9 kernel-rt, kernel-rt-kvm, kernel-rt-core, kernel-rt-modules, kernel-rt-debug-kvm, kernel-rt-debug-core, +12 moreaffected: workaround, no fix available
-
Red Hat CodeReady Linux Builder EUS (v.9.4) libperf 5.14.0-427.104.1.el9_4, kernel-debuginfo-common-s390x 5.14.0-427.104.1.el9_4, kernel-debuginfo-common-x86_64 5.14.0-427.104.1.el9_4, kernel-debuginfo-common-aarch64 5.14.0-427.104.1.el9_4, kernel-debuginfo-common-ppc64le 5.14.0-427.104.1.el9_4fixed: vendor fix RHSA-2026:0173
-
Red Hat CodeReady Linux Builder EUS (v.9.6) libperf 5.14.0-570.76.1.el9_6, kernel-debuginfo-common-s390x 5.14.0-570.76.1.el9_6, kernel-debuginfo-common-x86_64 5.14.0-570.76.1.el9_6, kernel-debuginfo-common-aarch64 5.14.0-570.76.1.el9_6, kernel-debuginfo-common-ppc64le 5.14.0-570.76.1.el9_6fixed: vendor fix RHSA-2025:23789
-
Red Hat Enterprise Linux AppStream (v. 9) rv 5.14.0-611.13.1.el9_7, perf 5.14.0-611.13.1.el9_7, rtla 5.14.0-611.13.1.el9_7, python3-perf 5.14.0-611.13.1.el9_7, kernel-devel-matched 5.14.0-611.13.1.el9_7, kernel-64k-devel-matched 5.14.0-611.13.1.el9_7, +7 morefixed: vendor fix RHSA-2025:22865
-
Red Hat Enterprise Linux AppStream (v. 10) rv 6.12.0-124.20.1.el10_1, perf 6.12.0-124.20.1.el10_1, rtla 6.12.0-124.20.1.el10_1, python3-perf 6.12.0-124.20.1.el10_1, kernel-devel-matched 6.12.0-124.20.1.el10_1, kernel-64k-devel-matched 6.12.0-124.20.1.el10_1, +7 morefixed: vendor fix RHSA-2025:22854
-
Red Hat Enterprise Linux AppStream E4S (v.9.0) perf 5.14.0-70.161.1.el9_0, kernel-devel-matched 5.14.0-70.161.1.el9_0, kernel-debug-devel-matched 5.14.0-70.161.1.el9_0, kernel-debuginfo-common-s390x 5.14.0-70.161.1.el9_0, kernel-zfcpdump-devel-matched 5.14.0-70.161.1.el9_0, kernel-debuginfo-common-x86_64 5.14.0-70.161.1.el9_0, +2 morefixed: vendor fix RHSA-2026:0576
-
Red Hat Enterprise Linux AppStream E4S (v.9.2) kernel-devel-matched 5.14.0-284.152.1.el9_2, kernel-64k-devel-matched 5.14.0-284.152.1.el9_2, kernel-debug-devel-matched 5.14.0-284.152.1.el9_2, kernel-debuginfo-common-s390x 5.14.0-284.152.1.el9_2, kernel-zfcpdump-devel-matched 5.14.0-284.152.1.el9_2, kernel-64k-debug-devel-matched 5.14.0-284.152.1.el9_2, +3 morefixed: vendor fix RHSA-2026:0535
-
Red Hat Enterprise Linux AppStream EUS (v. 10.0) kernel-devel-matched 6.12.0-55.52.1.el10_0, kernel-64k-devel-matched 6.12.0-55.52.1.el10_0, kernel-debug-devel-matched 6.12.0-55.52.1.el10_0, kernel-debuginfo-common-s390x 6.12.0-55.52.1.el10_0, kernel-zfcpdump-devel-matched 6.12.0-55.52.1.el10_0, kernel-64k-debug-devel-matched 6.12.0-55.52.1.el10_0, +3 morefixed: vendor fix RHSA-2026:0271
show 27 moreshow fewer
-
Red Hat Enterprise Linux AppStream EUS (v.9.4) rv 5.14.0-427.104.1.el9_4, perf 5.14.0-427.104.1.el9_4, rtla 5.14.0-427.104.1.el9_4, kernel-devel-matched 5.14.0-427.104.1.el9_4, kernel-64k-devel-matched 5.14.0-427.104.1.el9_4, kernel-debug-devel-matched 5.14.0-427.104.1.el9_4, +6 morefixed: vendor fix RHSA-2026:0173
-
Red Hat Enterprise Linux AppStream EUS (v.9.6) rv 5.14.0-570.76.1.el9_6, perf 5.14.0-570.76.1.el9_6, rtla 5.14.0-570.76.1.el9_6, python3-perf 5.14.0-570.76.1.el9_6, kernel-devel-matched 5.14.0-570.76.1.el9_6, kernel-64k-devel-matched 5.14.0-570.76.1.el9_6, +7 morefixed: vendor fix RHSA-2025:23789
-
Red Hat Enterprise Linux BaseOS (v. 9) kernel 5.14.0-611.13.1.el9_7, kernel-64k 5.14.0-611.13.1.el9_7, kernel-core 5.14.0-611.13.1.el9_7, kernel-tools 5.14.0-611.13.1.el9_7, kernel-modules 5.14.0-611.13.1.el9_7, kernel-64k-core 5.14.0-611.13.1.el9_7, +27 morefixed: vendor fix RHSA-2025:22865
-
Red Hat Enterprise Linux BaseOS (v. 10) kernel 6.12.0-124.20.1.el10_1, kernel-64k 6.12.0-124.20.1.el10_1, kernel-core 6.12.0-124.20.1.el10_1, kernel-tools 6.12.0-124.20.1.el10_1, kernel-modules 6.12.0-124.20.1.el10_1, kernel-64k-core 6.12.0-124.20.1.el10_1, +28 morefixed: vendor fix RHSA-2025:22854
-
Red Hat Enterprise Linux BaseOS E4S (v.9.0) kernel 5.14.0-70.161.1.el9_0, bpftool 5.14.0-70.161.1.el9_0, kernel-core 5.14.0-70.161.1.el9_0, kernel-tools 5.14.0-70.161.1.el9_0, python3-perf 5.14.0-70.161.1.el9_0, kernel-modules 5.14.0-70.161.1.el9_0, +14 morefixed: vendor fix RHSA-2026:0576
-
Red Hat Enterprise Linux BaseOS E4S (v.9.2) bpftool 7.0.0-284.152.1.el9_2, kernel 5.14.0-284.152.1.el9_2, kernel-64k 5.14.0-284.152.1.el9_2, kernel-core 5.14.0-284.152.1.el9_2, kernel-tools 5.14.0-284.152.1.el9_2, kernel-modules 5.14.0-284.152.1.el9_2, +27 morefixed: vendor fix RHSA-2026:0535
-
Red Hat Enterprise Linux BaseOS EUS (v. 10.0) kernel 6.12.0-55.52.1.el10_0, kernel-64k 6.12.0-55.52.1.el10_0, kernel-core 6.12.0-55.52.1.el10_0, kernel-tools 6.12.0-55.52.1.el10_0, kernel-modules 6.12.0-55.52.1.el10_0, kernel-64k-core 6.12.0-55.52.1.el10_0, +27 morefixed: vendor fix RHSA-2026:0271
-
Red Hat Enterprise Linux BaseOS EUS (v.9.4) bpftool 7.3.0-427.104.1.el9_4, kernel 5.14.0-427.104.1.el9_4, kernel-64k 5.14.0-427.104.1.el9_4, kernel-core 5.14.0-427.104.1.el9_4, kernel-tools 5.14.0-427.104.1.el9_4, python3-perf 5.14.0-427.104.1.el9_4, +28 morefixed: vendor fix RHSA-2026:0173
-
Red Hat Enterprise Linux BaseOS EUS (v.9.6) kernel 5.14.0-570.76.1.el9_6, kernel-64k 5.14.0-570.76.1.el9_6, kernel-core 5.14.0-570.76.1.el9_6, kernel-tools 5.14.0-570.76.1.el9_6, kernel-modules 5.14.0-570.76.1.el9_6, kernel-64k-core 5.14.0-570.76.1.el9_6, +27 morefixed: vendor fix RHSA-2025:23789
-
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) libperf 5.14.0-611.13.1.el9_7, kernel-debuginfo-common-s390x 5.14.0-611.13.1.el9_7, kernel-debuginfo-common-x86_64 5.14.0-611.13.1.el9_7, kernel-debuginfo-common-aarch64 5.14.0-611.13.1.el9_7, kernel-debuginfo-common-ppc64le 5.14.0-611.13.1.el9_7fixed: vendor fix RHSA-2025:22865
-
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) libperf 6.12.0-124.20.1.el10_1, kernel-debuginfo-common-s390x 6.12.0-124.20.1.el10_1, kernel-debuginfo-common-x86_64 6.12.0-124.20.1.el10_1, kernel-debuginfo-common-aarch64 6.12.0-124.20.1.el10_1, kernel-debuginfo-common-ppc64le 6.12.0-124.20.1.el10_1fixed: vendor fix RHSA-2025:22854
-
Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) kernel-debuginfo-common-s390x 6.12.0-55.52.1.el10_0, kernel-debuginfo-common-x86_64 6.12.0-55.52.1.el10_0, kernel-debuginfo-common-aarch64 6.12.0-55.52.1.el10_0, kernel-debuginfo-common-ppc64le 6.12.0-55.52.1.el10_0fixed: vendor fix RHSA-2026:0271
-
Red Hat Enterprise Linux NFV E4S (v.9.0) kernel-rt 5.14.0-70.161.1.rt21.233.el9_0, kernel-rt-kvm 5.14.0-70.161.1.rt21.233.el9_0, kernel-rt-core 5.14.0-70.161.1.rt21.233.el9_0, kernel-rt-modules 5.14.0-70.161.1.rt21.233.el9_0, kernel-rt-debug-kvm 5.14.0-70.161.1.rt21.233.el9_0, kernel-rt-debug-core 5.14.0-70.161.1.rt21.233.el9_0, +4 morefixed: vendor fix RHSA-2026:0537
-
Red Hat Enterprise Linux Real Time (v. 9) kernel-rt 5.14.0-611.13.1.el9_7, kernel-rt-64k 5.14.0-611.13.1.el9_7, kernel-rt-core 5.14.0-611.13.1.el9_7, kernel-rt-modules 5.14.0-611.13.1.el9_7, kernel-rt-64k-core 5.14.0-611.13.1.el9_7, kernel-rt-debug-core 5.14.0-611.13.1.el9_7, +14 morefixed: vendor fix RHSA-2025:22865
-
Red Hat Enterprise Linux Real Time (v. 10) kernel-rt 6.12.0-124.20.1.el10_1, kernel-rt-64k 6.12.0-124.20.1.el10_1, kernel-rt-core 6.12.0-124.20.1.el10_1, kernel-rt-modules 6.12.0-124.20.1.el10_1, kernel-rt-64k-core 6.12.0-124.20.1.el10_1, kernel-rt-debug-core 6.12.0-124.20.1.el10_1, +14 morefixed: vendor fix RHSA-2025:22854
-
Red Hat Enterprise Linux Real Time E4S (v.9.0) kernel-rt 5.14.0-70.161.1.rt21.233.el9_0, kernel-rt-core 5.14.0-70.161.1.rt21.233.el9_0, kernel-rt-modules 5.14.0-70.161.1.rt21.233.el9_0, kernel-rt-debug-core 5.14.0-70.161.1.rt21.233.el9_0, kernel-rt-debug-modules 5.14.0-70.161.1.rt21.233.el9_0, kernel-rt-modules-extra 5.14.0-70.161.1.rt21.233.el9_0, +2 morefixed: vendor fix RHSA-2026:0537
-
Red Hat Enterprise Linux Real Time E4S (v.9.2) kernel-rt 5.14.0-284.152.1.rt14.437.el9_2, kernel-rt-core 5.14.0-284.152.1.rt14.437.el9_2, kernel-rt-modules 5.14.0-284.152.1.rt14.437.el9_2, kernel-rt-debug-core 5.14.0-284.152.1.rt14.437.el9_2, kernel-rt-modules-core 5.14.0-284.152.1.rt14.437.el9_2, kernel-rt-debug-modules 5.14.0-284.152.1.rt14.437.el9_2, +4 morefixed: vendor fix RHSA-2026:0534
-
Red Hat Enterprise Linux Real Time EUS (v. 10.0) kernel-rt 6.12.0-55.52.1.el10_0, kernel-rt-64k 6.12.0-55.52.1.el10_0, kernel-rt-core 6.12.0-55.52.1.el10_0, kernel-rt-modules 6.12.0-55.52.1.el10_0, kernel-rt-64k-core 6.12.0-55.52.1.el10_0, kernel-rt-debug-core 6.12.0-55.52.1.el10_0, +14 morefixed: vendor fix RHSA-2026:0271
-
Red Hat Enterprise Linux Real Time EUS (v.9.4) kernel-rt 5.14.0-427.104.1.el9_4, kernel-rt-core 5.14.0-427.104.1.el9_4, kernel-rt-modules 5.14.0-427.104.1.el9_4, kernel-rt-debug-core 5.14.0-427.104.1.el9_4, kernel-rt-modules-core 5.14.0-427.104.1.el9_4, kernel-rt-debug-modules 5.14.0-427.104.1.el9_4, +4 morefixed: vendor fix RHSA-2026:0173
-
Red Hat Enterprise Linux Real Time EUS (v.9.6) kernel-rt 5.14.0-570.76.1.el9_6, kernel-rt-64k 5.14.0-570.76.1.el9_6, kernel-rt-core 5.14.0-570.76.1.el9_6, kernel-rt-modules 5.14.0-570.76.1.el9_6, kernel-rt-64k-core 5.14.0-570.76.1.el9_6, kernel-rt-debug-core 5.14.0-570.76.1.el9_6, +14 morefixed: vendor fix RHSA-2025:23789
-
Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt 5.14.0-611.13.1.el9_7, kernel-rt-core 5.14.0-611.13.1.el9_7, kernel-rt-modules 5.14.0-611.13.1.el9_7, kernel-rt-debug-core 5.14.0-611.13.1.el9_7, kernel-rt-modules-core 5.14.0-611.13.1.el9_7, kernel-rt-debug-modules 5.14.0-611.13.1.el9_7, +4 morefixed: vendor fix RHSA-2025:22865
-
Red Hat Enterprise Linux Real Time for NFV (v. 10) kernel-rt 6.12.0-124.20.1.el10_1, kernel-rt-core 6.12.0-124.20.1.el10_1, kernel-rt-modules 6.12.0-124.20.1.el10_1, kernel-rt-debug-core 6.12.0-124.20.1.el10_1, kernel-rt-modules-core 6.12.0-124.20.1.el10_1, kernel-rt-debug-modules 6.12.0-124.20.1.el10_1, +4 morefixed: vendor fix RHSA-2025:22854
-
Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2) kernel-rt 5.14.0-284.152.1.rt14.437.el9_2, kernel-rt-kvm 5.14.0-284.152.1.rt14.437.el9_2, kernel-rt-core 5.14.0-284.152.1.rt14.437.el9_2, kernel-rt-modules 5.14.0-284.152.1.rt14.437.el9_2, kernel-rt-debug-kvm 5.14.0-284.152.1.rt14.437.el9_2, kernel-rt-debug-core 5.14.0-284.152.1.rt14.437.el9_2, +6 morefixed: vendor fix RHSA-2026:0534
-
Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0) kernel-rt 6.12.0-55.52.1.el10_0, kernel-rt-kvm 6.12.0-55.52.1.el10_0, kernel-rt-core 6.12.0-55.52.1.el10_0, kernel-rt-modules 6.12.0-55.52.1.el10_0, kernel-rt-debug-kvm 6.12.0-55.52.1.el10_0, kernel-rt-debug-core 6.12.0-55.52.1.el10_0, +6 morefixed: vendor fix RHSA-2026:0271
-
Red Hat Enterprise Linux Real Time for NFV EUS (v.9.4) kernel-rt 5.14.0-427.104.1.el9_4, kernel-rt-kvm 5.14.0-427.104.1.el9_4, kernel-rt-core 5.14.0-427.104.1.el9_4, kernel-rt-modules 5.14.0-427.104.1.el9_4, kernel-rt-debug-kvm 5.14.0-427.104.1.el9_4, kernel-rt-debug-core 5.14.0-427.104.1.el9_4, +6 morefixed: vendor fix RHSA-2026:0173
-
Red Hat Enterprise Linux Real Time for NFV EUS (v.9.6) kernel-rt 5.14.0-570.76.1.el9_6, kernel-rt-kvm 5.14.0-570.76.1.el9_6, kernel-rt-core 5.14.0-570.76.1.el9_6, kernel-rt-modules 5.14.0-570.76.1.el9_6, kernel-rt-debug-kvm 5.14.0-570.76.1.el9_6, kernel-rt-debug-core 5.14.0-570.76.1.el9_6, +6 morefixed: vendor fix RHSA-2025:23789
-
Red Hat Enterprise Linux 6 perf, kernel, python-perf, kernel-kdump, kernel-firmware, kernel-bootwrapper, +1 more Red Hat Enterprise Linux 7 perf, kernel, bpftool, kernel-rt, python-perf, kernel-kdump, +8 more Red Hat Enterprise Linux 8 perf, kernel, bpftool, kernel-rt, kernel-core, kernel-tools, +29 more Red Hat Enterprise Linux AppStream E4S (v.9.2) perf 5.14.0-284.152.1.el9_2, rtla 5.14.0-284.152.1.el9_2 Red Hat Enterprise Linux AppStream EUS (v. 10.0) rv 6.12.0-55.52.1.el10_0, perf 6.12.0-55.52.1.el10_0, rtla 6.12.0-55.52.1.el10_0, python3-perf 6.12.0-55.52.1.el10_0 Red Hat Enterprise Linux BaseOS E4S (v.9.2) python3-perf 5.14.0-284.152.1.el9_2not affected: vulnerable code not present
4 more not affected in the full advisory
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- partial
- Assessed
- 9mo ago
Exploit prediction
0.15% chance of exploitation in the next 30 days, higher than 4% of all scored CVEs (FIRST EPSS, 2026-11-09).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CISA ADP | 3.1 | 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
| NVD | 3.1 | 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
| CNA | 3.1 | 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Affected products
- Linux Linux
Classification
- Technology feeds
References
- git.kernel.org /stable/c/479d8a2aedcc1db16f14c1a8a9c74b5bdf18b9ac
- git.kernel.org /stable/c/2c88069fac2c792e228e6a4ae71c9b9b5b9a87a6
- git.kernel.org /stable/c/76957b618ce729c3bd1e782fbc9d9991af653925
- git.kernel.org /stable/c/4e154cb5e7681c2910e2dfa09f05e3469e333745
-
git.kernel.org
/stable/c/da9e8f429139928570407e8f90559b5d46c20262
patch
-
git.kernel.org
/stable/c/7fcbe5b2c6a4b5407bf2241fdb71e0a390f6ab9a
patch
Sources
- CVE List CVE-2025-39925
- NVD CVE-2025-39925
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.