01 Record

CVE-2025-39902

mm/slub: avoid accessing metadata when pointer is invalid in object_err()

HighPUBLISHEDCNA: Linux

CNA base score7.1 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

View raw JSON

02 Description

mm/slub: avoid accessing metadata when pointer is invalid in object_err()

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.16% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 5.8% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-07-30.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-10-01 07:42Z11 MO AGO

Last updated

2026-08-05 12:05Z1 MO AGO

Reserved

2025-04-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.1)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Weaknesses

CWE-476NULL Pointer DereferenceBase
CWE-824Access of Uninitialized PointerBase

Data version

5.2

Document digest

13594b1a9653beca8098513addbb1a2ff23ea03a4c2e996578e43bad0c330c12

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux81819f0fc8285a2a5a921c019e3e3d7b6169d225 to < 872f2c34ff232af1e65ad2df86d61163c8ffad42, 81819f0fc8285a2a5a921c019e3e3d7b6169d225 to < f66012909e7bf383fcdc5850709ed5716073fdc4, 81819f0fc8285a2a5a921c019e3e3d7b6169d225 to < 7e287256904ee796c9477e3ec92b07f236481ef3, 81819f0fc8285a2a5a921c019e3e3d7b6169d225 to < 1f0797f17927b5cad0fb7eced422f9a7c30a3191, 81819f0fc8285a2a5a921c019e3e3d7b6169d225 to < 0ef7058b4dc6fcef622ac23b45225db57f17b83f, 81819f0fc8285a2a5a921c019e3e3d7b6169d225 to < dda6ec365ab04067adae40ef17015db447e90736, 81819f0fc8285a2a5a921c019e3e3d7b6169d225 to < 3baa1da473e6e50281324ff1d332d1a07a3bb02e, 81819f0fc8285a2a5a921c019e3e3d7b6169d225 to < b4efccec8d06ceb10a7d34d7b1c449c569d53770, 2.6.22—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/872f2c34ff232af1e65ad2df86d61163c8ffad42
git.kernel.orghttps://git.kernel.org/stable/c/f66012909e7bf383fcdc5850709ed5716073fdc4
git.kernel.orghttps://git.kernel.org/stable/c/7e287256904ee796c9477e3ec92b07f236481ef3
git.kernel.orghttps://git.kernel.org/stable/c/1f0797f17927b5cad0fb7eced422f9a7c30a3191
git.kernel.orghttps://git.kernel.org/stable/c/0ef7058b4dc6fcef622ac23b45225db57f17b83f
git.kernel.orghttps://git.kernel.org/stable/c/dda6ec365ab04067adae40ef17015db447e90736
git.kernel.orghttps://git.kernel.org/stable/c/3baa1da473e6e50281324ff1d332d1a07a3bb02e
git.kernel.orghttps://git.kernel.org/stable/c/b4efccec8d06ceb10a7d34d7b1c449c569d53770
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00007.html

01 Record index

CVE-2025-39902

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2025-39902

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References