01 Record

CVE-2025-39683

tracing: Limit access to parser->buffer when trace_get_user failed

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

tracing: Limit access to parser->buffer when trace_get_user failed

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.18% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 7.6% of scored records. A rank, not a probability.
NVD base score: 7.1 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-07-30.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-09-05 17:20Z12 MO AGO

Last updated

2026-08-05 12:04Z1 MO AGO

Reserved

2025-04-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-125Out-of-bounds ReadBase

Data version

5.2

Document digest

76b65b8134265be621bfbe4a5be9b190abfe2f34b98458c233ee9e72dbc4adfb

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux634684d79733124f7470b226b0f42aada4426b07 to < b842ef39c2ad6156c13afdec25ecc6792a9b67b9, 8c9af478c06bb1ab1422f90d8ecbc53defd44bc3 to < 41b838420457802f21918df66764b6fbf829d330, 8c9af478c06bb1ab1422f90d8ecbc53defd44bc3 to < 418b448e1d7470da9d4d4797f71782595ee69c49, 8c9af478c06bb1ab1422f90d8ecbc53defd44bc3 to < 58ff8064cb4c7eddac4da1a59da039ead586950a, 8c9af478c06bb1ab1422f90d8ecbc53defd44bc3 to < d0c68045b8b0f3737ed7bd6b8c83b7887014adee, 8c9af478c06bb1ab1422f90d8ecbc53defd44bc3 to < 3079517a5ba80901fe828a06998da64b9b8749be, 8c9af478c06bb1ab1422f90d8ecbc53defd44bc3 to < 6a909ea83f226803ea0e718f6e88613df9234d58, 24cd31752f47699b89b4b3471155c8e599a1a23a, e9cb474de7ff7a970c2a3951c12ec7e3113c0c35, 6ab671191f64b0da7d547e2ad4dc199ca7e5b558, 3d9281a4ac7171c808f9507f0937eb236b353905, 0b641b25870f02e2423e494365fc5243cc1e2759, ffd51dbfd2900e50c71b5c069fe407957e52d61f, cdd107d7f18158d966c2bc136204fe826dac445c, 5.10.36 to < 5.10.241, 4.4.269 to < 4.5, 4.9.269 to < 4.10, 4.14.233 to < 4.15, 4.19.191 to < 4.20, 5.4.118 to < 5.5, 5.11.20 to < 5.12, 5.12.3 to < 5.13, 5.13—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/b842ef39c2ad6156c13afdec25ecc6792a9b67b9
git.kernel.orghttps://git.kernel.org/stable/c/41b838420457802f21918df66764b6fbf829d330
git.kernel.orghttps://git.kernel.org/stable/c/418b448e1d7470da9d4d4797f71782595ee69c49
git.kernel.orghttps://git.kernel.org/stable/c/58ff8064cb4c7eddac4da1a59da039ead586950a
git.kernel.orghttps://git.kernel.org/stable/c/d0c68045b8b0f3737ed7bd6b8c83b7887014adee
git.kernel.orghttps://git.kernel.org/stable/c/3079517a5ba80901fe828a06998da64b9b8749be
git.kernel.orghttps://git.kernel.org/stable/c/6a909ea83f226803ea0e718f6e88613df9234d58
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00007.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-082556.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-032379.html

01 Record index

CVE-2025-39683

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2025-39683

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References