01 Record

CVE-2025-39770

net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM

HighPUBLISHEDCNA: Linux

CNA base score7.5 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

View raw JSON

02 Description

net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.36% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 28.7% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-07-30.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-09-11 16:56Z11 MO AGO

Last updated

2026-08-05 12:05Z1 MO AGO

Reserved

2025-04-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.5)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses

CWE-841Improper Enforcement of Behavioral WorkflowClass

Data version

5.2

Document digest

42cc38e8e58449180c2ed219ea341a37ceb939938abcb69671eef8f0adf617db

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxa84978a9cda68f0afe3f01d476c68db21526baf1 to < a0478d7e888028f85fa7785ea838ce0ca09398e2, c69bc67c1cb211aa390bea6e512bb01b1241fefb to < 2156d9e9f2e483c8c3906c0ea57ea312c1424235, 04c20a9356f283da623903e81e7c6d5df7e4dc3c to < 041e2f945f82fdbd6fff577b79c33469430297aa, 04c20a9356f283da623903e81e7c6d5df7e4dc3c to < 794ddbb7b63b6828c75967b9bcd43b086716e7a1, 04c20a9356f283da623903e81e7c6d5df7e4dc3c to < 864e3396976ef41de6cc7bc366276bf4e084fff2, bcefc3cd7f592a70fcbbbfd7ad1fbc69172ea78b, 477b35d94a21530046fe91589960732fcf2b29ed, a27a5c40ee4cbe00294e2c76160de5f2589061ba, 9f605135a5c0fe614c2b15197b9ced1e217eca59, 705350fbd6ed4b5d89ee045fa57a0594a72b17d7, 6.1.116 to < 6.1.149, 6.6.60 to < 6.6.103, 4.19.323 to < 4.20, 5.4.285 to < 5.5, 5.10.229 to < 5.11, 5.15.171 to < 5.16, 6.11.7 to < 6.12, 6.12—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/a0478d7e888028f85fa7785ea838ce0ca09398e2
git.kernel.orghttps://git.kernel.org/stable/c/2156d9e9f2e483c8c3906c0ea57ea312c1424235
git.kernel.orghttps://git.kernel.org/stable/c/041e2f945f82fdbd6fff577b79c33469430297aa
git.kernel.orghttps://git.kernel.org/stable/c/794ddbb7b63b6828c75967b9bcd43b086716e7a1
git.kernel.orghttps://git.kernel.org/stable/c/864e3396976ef41de6cc7bc366276bf4e084fff2
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-082556.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-032379.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-019113.html

01 Record index

CVE-2025-39770

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2025-39770

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References