{"schema_version":"1.7.5","id":"CVE-2025-39860","published":"2025-09-19T15:26:30.767Z","modified":"2026-07-15T01:49:12.704185216Z","related":["SUSE-SU-2025:03600-1","SUSE-SU-2025:03614-1","SUSE-SU-2025:03615-1","SUSE-SU-2025:03628-1","SUSE-SU-2025:03634-1","SUSE-SU-2025:20851-1","SUSE-SU-2025:20861-1","SUSE-SU-2025:20870-1","SUSE-SU-2025:20898-1","SUSE-SU-2025:21074-1","SUSE-SU-2025:21139-1","SUSE-SU-2025:21179-1","SUSE-SU-2025:3716-1","SUSE-SU-2025:3751-1","SUSE-SU-2025:3761-1","SUSE-SU-2025:4057-1","SUSE-SU-2025:4132-1","SUSE-SU-2025:4141-1","SUSE-SU-2026:20560-1","openSUSE-SU-2025:20081-1"],"summary":"Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()\n\nsyzbot reported the splat below without a repro.\n\nIn the splat, a single thread calling bt_accept_dequeue() freed sk\nand touched it after that.\n\nThe root cause would be the racy l2cap_sock_cleanup_listen() call\nadded by the cited commit.\n\nbt_accept_dequeue() is called under lock_sock() except for\nl2cap_sock_release().\n\nTwo threads could see the same socket during the list iteration\nin bt_accept_dequeue():\n\n  CPU1                        CPU2 (close())\n  ----                        ----\n  sock_hold(sk)               sock_hold(sk);\n  lock_sock(sk)   <-- block close()\n  sock_put(sk)\n  bt_accept_unlink(sk)\n    sock_put(sk)  <-- refcnt by bt_accept_enqueue()\n  release_sock(sk)\n                              lock_sock(sk)\n                              sock_put(sk)\n                              bt_accept_unlink(sk)\n                                sock_put(sk)        <-- last refcnt\n                              bt_accept_unlink(sk)  <-- UAF\n\nDepending on the timing, the other thread could show up in the\n\"Freed by task\" part.\n\nLet's call l2cap_sock_cleanup_listen() under lock_sock() in\nl2cap_sock_release().\n\n[0]:\nBUG: KASAN: slab-use-after-free in debug_spin_lock_before kernel/locking/spinlock_debug.c:86 [inline]\nBUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x26f/0x2b0 kernel/locking/spinlock_debug.c:115\nRead of size 4 at addr ffff88803b7eb1c4 by task syz.5.3276/16995\nCPU: 3 UID: 0 PID: 16995 Comm: syz.5.3276 Not tainted syzkaller #0 PREEMPT(full)\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014\nCall Trace:\n <TASK>\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:378 [inline]\n print_report+0xcd/0x630 mm/kasan/report.c:482\n kasan_report+0xe0/0x110 mm/kasan/report.c:595\n debug_spin_lock_before kernel/locking/spinlock_debug.c:86 [inline]\n do_raw_spin_lock+0x26f/0x2b0 kernel/locking/spinlock_debug.c:115\n spin_lock_bh include/linux/spinlock.h:356 [inline]\n release_sock+0x21/0x220 net/core/sock.c:3746\n bt_accept_dequeue+0x505/0x600 net/bluetooth/af_bluetooth.c:312\n l2cap_sock_cleanup_listen+0x5c/0x2a0 net/bluetooth/l2cap_sock.c:1451\n l2cap_sock_release+0x5c/0x210 net/bluetooth/l2cap_sock.c:1425\n __sock_release+0xb3/0x270 net/socket.c:649\n sock_close+0x1c/0x30 net/socket.c:1439\n __fput+0x3ff/0xb70 fs/file_table.c:468\n task_work_run+0x14d/0x240 kernel/task_work.c:227\n resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]\n exit_to_user_mode_loop+0xeb/0x110 kernel/entry/common.c:43\n exit_to_user_mode_prepare include/linux/irq-entry-common.h:225 [inline]\n syscall_exit_to_user_mode_work include/linux/entry-common.h:175 [inline]\n syscall_exit_to_user_mode include/linux/entry-common.h:210 [inline]\n do_syscall_64+0x3f6/0x4c0 arch/x86/entry/syscall_64.c:100\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\nRIP: 0033:0x7f2accf8ebe9\nCode: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48\nRSP: 002b:00007ffdb6cb1378 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4\nRAX: 0000000000000000 RBX: 00000000000426fb RCX: 00007f2accf8ebe9\nRDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003\nRBP: 00007f2acd1b7da0 R08: 0000000000000001 R09: 00000012b6cb166f\nR10: 0000001b30e20000 R11: 0000000000000246 R12: 00007f2acd1b609c\nR13: 00007f2acd1b6090 R14: ffffffffffffffff R15: 00007ffdb6cb1490\n </TASK>\n\nAllocated by task 5326:\n kasan_save_stack+0x33/0x60 mm/kasan/common.c:47\n kasan_save_track+0x14/0x30 mm/kasan/common.c:68\n poison_kmalloc_redzone mm/kasan/common.c:388 [inline]\n __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:405\n kasan_kmalloc include/linux/kasan.h:260 [inline]\n __do_kmalloc_node mm/slub.c:4365 [inline]\n __kmalloc_nopro\n---truncated---","affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"a2da00d1ea1abfb04f846638e210b5b5166e3c9c"},{"fixed":"964cbb198f9c46c2b2358cd1faffc04c1e8248cf"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"06f87c96216bc5cd1094c23492274f77f1d5dd3b"},{"fixed":"83e1d9892ef51785cf0760b7681436760dda435a"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"fbe5a2fed8156cc19eb3b956602b0a1dd46a302d"},{"fixed":"47f6090bcf75c369695d21c3f179db8a56bbbd49"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"29fac18499332211b2615ade356e2bd8b3269f98"},{"fixed":"2ca99fc3512a8074de20ee52a87b492dfcc41a4d"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"1728137b33c00d5a2b5110ed7aafb42e7c32e4a1"},{"fixed":"6077d16b5c0f65d571eee709de2f0541fb5ef0ca"},{"fixed":"306b0991413b482dbf5585b423022123bb505966"},{"fixed":"3dff390f55ccd9ce12e91233849769b5312180c2"},{"fixed":"862c628108562d8c7a516a900034823b381d3cba"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"0"},{"last_affected":"51822644a047eac2310fab0799b64e3430b5a111"},{"last_affected":"82cdb2ccbe43337798393369f0ceb98699fe6037"},{"last_affected":"10426afe65c8bf7b24dd0c7be4dcc65f86fc99f9"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"5.4.253"},{"fixed":"5.4.299"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"5.10.190"},{"fixed":"5.10.243"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"5.15.126"},{"fixed":"5.15.192"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"6.1.45"},{"fixed":"6.1.151"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"4.14.322"},{"fixed":"4.15"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"4.19.291"},{"fixed":"4.20"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"6.4.10"},{"fixed":"6.5"}]}],"versions":["v5.4.298","v5.4.297","v5.4.296","v5.4.295","v5.4.294","v5.4.293","v5.4.292","v5.4.291","v5.4.290","v5.4.289","v5.4.288","v5.4.287","v5.4.286","v5.4.285","v5.4.284","v5.4.283","v5.4.282","v5.4.281","v5.4.280","v5.4.279","v5.4.278","v5.4.277","v5.4.276","v5.4.275","v5.4.274","v5.4.273","v5.4.272","v5.4.271","v5.4.270","v5.4.269","v5.4.268","v5.4.267","v5.4.266","v5.4.265","v5.4.264","v5.4.263","v5.4.262","v5.4.261","v5.4.260","v5.4.259","v5.4.258","v5.4.257","v5.4.256","v5.4.255","v5.4.254","v5.4.253","v5.10.242","v5.10.241","v5.10.240","v5.10.239","v5.10.238","v5.10.237","v5.10.236","v5.10.235","v5.10.234","v5.10.233","v5.10.232","v5.10.231","v5.10.230","v5.10.229","v5.10.228","v5.10.227","v5.10.226","v5.10.225","v5.10.224","v5.10.223","v5.10.222","v5.10.221","v5.10.220","v5.10.219","v5.10.218","v5.10.217","v5.10.216","v5.10.215","v5.10.214","v5.10.213","v5.10.212","v5.10.211","v5.10.210","v5.10.209","v5.10.208","v5.10.207","v5.10.206","v5.10.205","v5.10.204","v5.10.203","v5.10.202","v5.10.201","v5.10.200","v5.10.199","v5.10.198","v5.10.197","v5.10.196","v5.10.195","v5.10.194","v5.10.193","v5.10.192","v5.10.191","v5.10.190","v5.15.191","v5.15.190","v5.15.189","v5.15.188","v5.15.187","v5.15.186","v5.15.185","v5.15.184","v5.15.183","v5.15.182","v5.15.181","v5.15.180","v5.15.179","v5.15.178","v5.15.177","v5.15.176","v5.15.175","v5.15.174","v5.15.173","v5.15.172","v5.15.171","v5.15.170","v5.15.169","v5.15.168","v5.15.167","v5.15.166","v5.15.165","v5.15.164","v5.15.163","v5.15.162","v5.15.161","v5.15.160","v5.15.159","v5.15.158","v5.15.157","v5.15.156","v5.15.155","v5.15.154","v5.15.153","v5.15.152","v5.15.151","v5.15.150","v5.15.149","v5.15.148","v5.15.147","v5.15.146","v5.15.145","v5.15.144","v5.15.143","v5.15.142","v5.15.141","v5.15.140","v5.15.139","v5.15.138","v5.15.137","v5.15.136","v5.15.135","v5.15.134","v5.15.133","v5.15.132","v5.15.131","v5.15.130","v5.15.129","v5.15.128","v5.15.127","v5.15.126","v6.1.150","v6.1.149","v6.1.148","v6.1.147","v6.1.146","v6.1.145","v6.1.144","v6.1.143","v6.1.142","v6.1.141","v6.1.140","v6.1.139","v6.1.138","v6.1.137","v6.1.136","v6.1.135","v6.1.134","v6.1.133","v6.1.132","v6.1.131","v6.1.130","v6.1.129","v6.1.128","v6.1.127","v6.1.126","v6.1.125","v6.1.124","v6.1.123","v6.1.122","v6.1.121","v6.1.120","v6.1.119","v6.1.118","v6.1.117","v6.1.116","v6.1.115","v6.1.114","v6.1.113","v6.1.112","v6.1.111","v6.1.110","v6.1.109","v6.1.108","v6.1.107","v6.1.106","v6.1.105","v6.1.104","v6.1.103","v6.1.102","v6.1.101","v6.1.100","v6.1.99","v6.1.98","v6.1.97","v6.1.96","v6.1.95","v6.1.94","v6.1.93","v6.1.92","v6.1.91","v6.1.90","v6.1.89","v6.1.88","v6.1.87","v6.1.86","v6.1.85","v6.1.84","v6.1.83","v6.1.82","v6.1.81","v6.1.80","v6.1.79","v6.1.78","v6.1.77","v6.1.76","v6.1.75","v6.1.74","v6.1.73","v6.1.72","v6.1.71","v6.1.70","v6.1.69","v6.1.68","v6.1.67","v6.1.66","v6.1.65","v6.1.64","v6.1.63","v6.1.62","v6.1.61","v6.1.60","v6.1.59","v6.1.58","v6.1.57","v6.1.56","v6.1.55","v6.1.54","v6.1.53","v6.1.52","v6.1.51","v6.1.50","v6.1.49","v6.1.48","v6.1.47","v6.1.46","v6.1.45","v6.4.9","v4.19.290","v4.14.321","v6.4.8","v4.19.289","v4.14.320","v6.4.7","v6.4.6","v4.19.288","v6.4.5","v6.4.4","v6.4.3","v6.4","v6.4.2","v6.4-rc7","v6.4-rc1","v6.4.1","v6.4-rc6","v4.19.287","v4.14.319","v6.4-rc5","v6.4-rc3","v4.19.286","v4.14.318","v6.4-rc4","v6.4-rc2","v4.19.285","v4.14.317","v4.19.284","v4.14.316","v4.19.283","v4.14.315","v4.19.282","v4.14.314","v6.3","v6.3-rc1","v4.19.281","v4.14.313","v6.3-rc7","v6.3-rc2","v6.3-rc3","v6.3-rc5","v6.3-rc6","v6.3-rc4","v4.19.280","v4.14.312","v6.2-rc6","v4.19.279","v4.14.311","v4.19.278","v4.14.310","v4.19.277","v4.14.309","v4.19.276","v4.14.308","v4.19.275","v4.14.307","v6.2-rc1","v6.2","v4.19.274","v4.19.273","v4.14.306","v6.2-rc2","v6.2-rc8","v4.19.272","v4.14.305","v6.2-rc5","v6.2-rc4","v6.2-rc7","v6.2-rc3","v4.19.271","v4.14.304","v4.19.270","v4.14.303","v4.19.269","v4.14.302","v6.1-rc1","v6.1","v6.1-rc8","v6.1-rc3","v4.19.268","v4.14.301","v6.1-rc6","v4.19.267","v4.14.300","v6.1-rc7","v6.1-rc4","v6.1-rc2","v6.1-rc5","v4.19.266","v4.14.299","v4.19.265","v4.19.264","v4.14.298","v4.19.263","v4.14.297","v4.14.296","v4.19.262","v6.0-rc1","v4.19.261","v4.14.295","v6.0","v6.0-rc7","v4.19.260","v6.0-rc3","v6.0-rc2","v4.19.259","v4.14.294","v6.0-rc6","v6.0-rc4","v6.0-rc5","v4.19.258","v4.14.293","v4.14.292","v4.19.257","v4.19.256","v4.14.291","v5.19","v4.19.255","v4.14.290","v5.19-rc1","v4.19.254","v5.19-rc5","v5.19-rc8","v5.19-rc6","v5.18","v5.19-rc2","v5.19-rc7","v4.19.253","v4.14.289","v5.19-rc3","v4.19.252","v4.14.288","v5.19-rc4","v4.19.251","v4.14.287","v4.19.250","v4.14.286","v4.19.249","v4.14.285","v5.18-rc1","v4.19.248","v4.14.284","v4.19.247","v4.14.283","v4.19.246","v4.14.282","v4.19.245","v4.14.281","v5.18-rc7","v5.18-rc2","v4.19.244","v4.14.280","v4.19.243","v4.14.279","v5.18-rc5","v5.17","v5.18-rc4","v5.18-rc3","v5.18-rc6","v4.19.242","v4.14.278","v4.19.241","v4.14.277","v4.19.240","v4.19.239","v4.14.276","v4.19.238","v4.14.275","v4.19.237","v4.14.274","v5.17-rc6","v5.17-rc4","v4.19.236","v4.14.273","v5.17-rc8","v5.17-rc7","v4.19.235","v4.14.272","v5.17-rc1","v5.17-rc3","v4.19.234","v4.14.271","v5.17-rc2","v4.19.233","v4.14.270","v4.19.232","v4.14.269","v5.17-rc5","v5.16","v4.19.231","v4.14.268","v4.19.230","v4.14.267","v4.19.229","v4.14.266","v4.19.228","v4.14.265","v4.19.227","v4.14.264","v4.19.226","v4.14.263","v4.19.225","v4.14.262","v5.16-rc1","v5.16-rc8","v4.19.224","v4.14.261","v5.16-rc5","v5.16-rc6","v4.19.223","v4.14.260","v5.16-rc7","v4.19.222","v4.14.259","v5.16-rc3","v5.16-rc2","v4.19.221","v4.14.258","v5.16-rc4","v4.19.220","v4.14.257","v5.15","v4.19.219","v4.14.256","v4.19.218","v4.14.255","v4.19.217","v4.19.216","v4.14.254","v4.19.215","v5.15-rc2","v5.15-rc1","v5.15-rc4","v5.15-rc7","v4.19.214","v4.14.253","v5.15-rc3","v5.15-rc5","v4.19.213","v4.14.252","v5.15-rc6","v4.19.212","v4.14.251","v5.14","v5.14-rc3","v4.19.211","v4.14.250","v4.19.210","v4.19.209","v4.14.249","v5.14-rc1","v4.19.208","v4.14.248","v4.19.207","v4.14.247","v4.19.206","v4.14.246","v4.19.205","v4.14.245","v5.14-rc2","v5.14-rc7","v5.14-rc6","v4.14.244","v4.19.204","v5.13-rc1","v5.14-rc5","v5.14-rc4","v4.19.203","v4.14.243","v4.19.202","v4.19.201","v4.14.242","v4.19.200","v4.14.241","v5.13","v4.19.199","v4.19.198","v4.14.240","v4.14.239","v4.19.197","v4.19.196","v4.14.238","v5.13-rc6","v5.13-rc7","v4.14.237","v4.19.195","v5.13-rc3","v5.13-rc2","v5.13-rc4","v5.13-rc5","v4.19.194","v4.14.236","v4.19.193","v4.14.235","v4.19.192","v4.14.234","v4.19.191","v4.14.233","v5.12","v4.19.190","v4.14.232","v4.19.189","v5.12-rc2","v5.12-rc1-dontuse","v5.12-rc1","v4.19.188","v4.14.231","v5.12-rc8","v5.12-rc3","v5.12-rc7","v5.12-rc5","v4.14.230","v4.19.187","v5.12-rc6","v4.19.186","v4.19.185","v4.14.229","v4.19.184","v4.14.228","v5.12-rc4","v5.10","v4.14.227","v4.19.183","v5.11","v4.19.182","v4.14.226","v4.19.181","v4.19.180","v4.14.225","v4.19.179","v4.14.224","v4.19.178","v4.14.223","v4.19.177","v4.14.222","v5.11-rc3","v4.19.176","v4.14.221","v5.11-rc7","v5.11-rc6","v5.11-rc5","v5.11-rc1","v4.19.175","v5.11-rc4","v4.19.174","v4.14.220","v5.11-rc2","v4.19.173","v4.14.219","v4.19.172","v4.14.218","v4.19.171","v4.14.217","v4.19.170","v4.19.169","v4.14.216","v5.10-rc1","v4.19.168","v4.19.167","v4.14.215","v4.19.166","v4.14.214","v4.19.165","v4.14.213","v4.19.164","v4.19.163","v4.14.212","v5.10-rc7","v5.10-rc4","v5.10-rc3","v5.10-rc6","v5.9","v4.14.211","v4.19.162","v5.10-rc2","v5.10-rc5","v4.19.161","v4.14.210","v4.19.160","v4.14.209","v4.19.159","v4.14.208","v4.19.158","v4.14.207","v4.19.157","v4.14.206","v4.19.156","v4.14.205","v4.19.155","v4.14.204","v4.19.154","v4.14.203","v4.19.153","v4.19.152","v5.9-rc1","v4.14.202","v5.9-rc7","v4.14.201","v4.19.151","v4.19.150","v4.14.200","v5.9-rc8","v5.9-rc6","v5.9-rc4","v5.9-rc5","v4.19.149","v5.9-rc3","v4.19.148","v4.14.199","v4.19.147","v5.9-rc2","v4.19.146","v4.14.198","v4.19.145","v4.19.144","v4.14.197","v4.19.143","v4.14.196","v5.8","v4.19.142","v4.14.195","v4.19.141","v4.14.194","v4.19.140","v4.14.193","v4.19.139","v4.19.138","v4.14.192","v4.19.137","v5.7","v5.8-rc2","v5.8-rc1","v5.8-rc7","v4.14.191","v4.19.136","v5.8-rc5","v4.19.135","v4.14.190","v5.8-rc3","v5.8-rc4","v4.19.134","v4.14.189","v5.8-rc6","v4.19.133","v4.14.188","v4.19.132","v4.19.131","v4.14.187","v4.19.130","v4.14.186","v5.7-rc4","v4.14.185","v4.19.129","v4.19.128","v4.14.184","v4.14.183","v4.19.127","v4.19.126","v5.7-rc7","v5.7-rc1","v4.19.125","v4.14.182","v5.7-rc3","v5.7-rc2","v5.7-rc5","v4.19.124","v4.14.181","v5.7-rc6","v4.19.123","v4.14.180","v4.19.122","v5.6","v4.19.121","v4.14.179","v4.19.120","v4.14.178","v4.19.119","v4.14.177","v4.19.118","v4.14.176","v4.19.117","v4.19.116","v4.19.115","v4.19.114","v4.14.175","v5.6-rc1","v4.14.174","v4.19.113","v5.6-rc7","v5.6-rc6","v5.6-rc3","v5.6-rc4","v5.6-rc2","v5.6-rc5","v4.19.112","v4.19.111","v4.14.173","v4.19.110","v4.19.109","v4.14.172","v4.19.108","v4.19.107","v4.19.106","v4.14.171","v4.19.105","v4.19.104","v4.19.103","v4.14.170","v4.19.102","v5.5","v4.19.101","v4.14.169","v5.5-rc5","v4.19.100","v5.5-rc7","v5.5-rc2","v5.5-rc1","v4.19.99","v4.14.168","v5.4","v4.19.98","v4.14.167","v5.5-rc4","v4.19.97","v4.14.166","v5.5-rc3","v5.5-rc6","v4.19.96","v4.14.165","v4.19.95","v4.14.164","v4.19.94","v4.14.163","v4.19.93","v4.14.162","v4.19.92","v4.14.161","v4.19.91","v4.14.160","v4.19.90","v4.14.159","v4.14.158","v4.19.89","v4.19.88","v5.4-rc1","v4.14.157","v4.19.87","v5.4-rc6","v5.4-rc3","v4.19.86","v4.14.156","v5.4-rc4","v5.4-rc8","v4.14.155","v4.19.85","v4.19.84","v4.14.154","v5.4-rc7","v5.4-rc5","v5.3","v5.4-rc2","v4.19.83","v4.14.153","v4.19.82","v4.14.152","v4.19.81","v4.14.151","v4.19.80","v4.14.150","v4.19.79","v4.14.149","v4.19.78","v4.14.148","v4.19.77","v4.14.147","v4.19.76","v4.14.146","v4.19.75","v5.3-rc5","v5.3-rc1","v4.19.74","v4.14.145","v5.3-rc2","v4.19.73","v4.14.144","v5.3-rc3","v5.3-rc8","v4.19.72","v4.14.143","v5.3-rc7","v5.3-rc4","v4.19.71","v4.14.142","v4.19.70","v4.19.69","v4.14.141","v5.2","v5.3-rc6","v4.19.68","v4.14.140","v4.14.139","v4.19.67","v4.14.138","v4.19.66","v4.14.137","v4.19.65","v4.19.64","v4.14.136","v4.14.135","v4.19.63","v4.14.134","v4.19.62","v4.19.61","v4.19.60","v5.2-rc2","v4.14.133","v4.19.59","v5.2-rc7","v5.2-rc4","v4.19.58","v5.2-rc1","v4.14.132","v4.19.57","v5.2-rc5","v5.2-rc6","v4.14.131","v4.19.56","v5.2-rc3","v4.14.130","v4.14.129","v4.19.55","v5.1","v4.19.54","v4.14.128","v4.19.53","v4.14.127","v4.19.52","v4.14.126","v4.19.51","v4.14.125","v4.19.50","v4.14.124","v4.19.49","v4.14.123","v4.19.48","v4.19.47","v4.14.122","v4.19.46","v4.14.121","v4.19.45","v4.19.44","v4.14.120","v4.14.119","v4.19.43","v5.0-rc8","v4.14.118","v4.19.42","v5.1-rc7","v5.1-rc1","v4.19.41","v4.14.117","v5.1-rc6","v4.19.40","v4.14.116","v5.1-rc5","v4.19.39","v4.19.38","v4.14.115","v5.0","v4.19.37","v4.14.114","v5.1-rc3","v4.19.36","v4.14.113","v5.1-rc2","v4.19.35","v4.14.112","v5.1-rc4","v4.19.34","v4.14.111","v5.0-rc1","v4.19.33","v4.14.110","v4.19.32","v4.14.109","v4.19.31","v4.14.108","v4.19.30","v4.14.107","v4.14.106","v4.19.29","v4.14.105","v4.19.28","v4.19.27","v4.19.26","v4.14.104","v5.0-rc4","v5.0-rc3","v5.0-rc6","v4.19.25","v4.14.103","v5.0-rc7","v4.19.24","v4.14.102","v5.0-rc2","v4.19.23","v4.14.101","v5.0-rc5","v4.19.22","v4.14.100","v4.19.21","v4.14.99","v4.19.20","v4.14.98","v4.14.97","v4.19.19","v4.19.18","v4.14.96","v4.14.95","v4.19.17","v4.20-rc1","v4.14.94","v4.19.16","v4.19","v4.14.93","v4.19.15","v4.20","v4.14.92","v4.19.14","v4.19.13","v4.14.91","v4.20-rc7","v4.20-rc5","v4.14.90","v4.19.12","v4.20-rc6","v4.19.11","v4.14.89","v4.19.10","v4.20-rc4","v4.20-rc2","v4.14.88","v4.19.9","v4.14.87","v4.19.8","v4.20-rc3","v4.14.86","v4.19.7","v4.14.85","v4.19.6","v4.14.84","v4.19.5","v4.19.4","v4.14.83","v4.14.82","v4.19.3","v4.14.81","v4.19.2","v4.14.80","v4.19.1","v4.14.79","v4.14.78","v4.19-rc2","v4.19-rc8","v4.19-rc4","v4.14.77","v4.19-rc1","v4.14.76","v4.19-rc7","v4.14.75","v4.14.74","v4.19-rc6","v4.19-rc5","v4.14.73","v4.19-rc3","v4.14.72","v4.14.71","v4.14.70","v4.14.69","v4.14.68","v4.14.67","v4.14.66","v4.18","v4.14.65","v4.14.64","v4.14.63","v4.18-rc1","v4.14.62","v4.18-rc8","v4.18-rc2","v4.18-rc5","v4.14.61","v4.18-rc6","v4.14.60","v4.18-rc7","v4.14.59","v4.17","v4.14.58","v4.18-rc3","v4.14.57","v4.14.56","v4.18-rc4","v4.14.55","v4.14.54","v4.14.53","v4.14.52","v4.14.51","v4.14.50","v4.14.49","v4.14.48","v4.17-rc1","v4.14.47","v4.17-rc2","v4.17-rc7","v4.17-rc3","v4.17-rc4","v4.16","v4.14.46","v4.14.45","v4.17-rc6","v4.14.44","v4.17-rc5","v4.14.43","v4.14.42","v4.14.41","v4.14.40","v4.14.39","v4.14.38","v4.14.37","v4.14.36","v4.14.35","v4.14.34","v4.14.33","v4.16-rc7","v4.16-rc4","v4.14.32","v4.16-rc1","v4.16-rc2","v4.16-rc5","v4.14.31","v4.14.30","v4.16-rc3","v4.16-rc6","v4.14.29","v4.14.28","v4.14.27","v4.14.26","v4.14.25","v4.14.24","v4.14","v4.14.23","v4.15","v4.14.22","v4.14.21","v4.14.20","v4.14.19","v4.14.18","v4.14.17","v4.15-rc1","v4.14.16","v4.15-rc4","v4.14.15","v4.15-rc9","v4.14.14","v4.15-rc8","v4.15-rc7","v4.14.13","v4.15-rc3","v4.15-rc2","v4.15-rc5","v4.15-rc6","v4.14.12","v4.14.11","v4.14.10","v4.14.9","v4.14.8","v4.14.7","v4.14.6","v4.14.5","v4.14.4","v4.14.3","v4.14.2","v4.14-rc1","v4.14.1","v4.14-rc7","v4.14-rc3","v4.13","v4.14-rc8","v4.14-rc4","v4.14-rc6","v4.14-rc2","v4.14-rc5","v4.13-rc2","v4.13-rc1","v4.13-rc3","v4.13-rc7","v4.13-rc4","v4.13-rc5","v4.13-rc6","v4.12-rc1","v4.12","v4.12-rc5","v4.12-rc7","v4.12-rc6","v4.12-rc4","v4.12-rc2","v4.12-rc3","v4.11","v4.11-rc1","v4.11-rc6","v4.11-rc8","v4.11-rc7","v4.11-rc3","v4.11-rc5","v4.11-rc2","v4.11-rc4","v4.10","v4.9","v4.10-rc8","v4.10-rc3","v4.10-rc1","v4.10-rc7","v4.10-rc6","v4.10-rc2","v4.10-rc5","v4.10-rc4","v4.9-rc7","v4.9-rc6","v4.9-rc8","v4.9-rc1","v4.9-rc5","v4.9-rc3","v4.9-rc4","v4.9-rc2","v4.8","v4.8-rc8","v4.8-rc2","v4.8-rc1","v4.8-rc7","v4.8-rc6","v4.8-rc5","v4.8-rc4","v4.8-rc3","v4.7","v4.7-rc4","v4.7-rc2","v4.7-rc1","v4.7-rc7","v4.7-rc6","v4.7-rc3","v4.7-rc5","v4.6","v4.6-rc1","v4.6-rc6","v4.6-rc4","v4.6-rc7","v4.6-rc5","v4.5-rc4","v4.6-rc2","v4.6-rc3","v4.5","v4.4","v4.5-rc1","v4.5-rc6","v4.5-rc2","v4.5-rc7","v4.5-rc5","v4.5-rc3","v4.4-rc1","v4.4-rc2","v4.4-rc8","v4.4-rc3","v4.4-rc7","v4.4-rc5","v4.4-rc6","v4.4-rc4","v4.3","v4.3-rc1","v4.3-rc6","v4.3-rc4","v4.3-rc2","v4.3-rc7","v4.3-rc5","v4.3-rc3","v4.2","v4.2-rc2","v4.2-rc1","v4.2-rc8","v4.2-rc4","v4.2-rc6","v4.2-rc7","v4.0-rc5","v4.2-rc5","v4.2-rc3","v4.1-rc2","v4.1","v4.1-rc1","v4.1-rc8","v4.1-rc7","v4.1-rc6","v4.1-rc3","v4.1-rc4","v4.0","v4.1-rc5","v4.0-rc1","v4.0-rc2","v4.0-rc7","v4.0-rc3","v4.0-rc6","v4.0-rc4","v3.19","v3.19-rc7","v3.19-rc5","v3.19-rc1","v3.19-rc6","v3.19-rc4","v3.18-rc1","v3.19-rc3","v3.19-rc2","v3.18","v3.18-rc7","v3.18-rc6","v3.18-rc2","v3.18-rc3","v3.18-rc4","v3.18-rc5","v3.17","v3.17-rc1","v3.17-rc7","v3.17-rc2","v3.17-rc4","v3.16","v3.17-rc5","v3.17-rc6","v3.17-rc3","v3.16-rc7","v3.16-rc1","v3.16-rc3","v3.16-rc5","v3.16-rc6","v3.16-rc2","v3.16-rc4","v3.13","v3.15","v3.15-rc5","v3.15-rc8","v3.15-rc1","v3.15-rc6","v3.15-rc3","v3.15-rc7","v3.15-rc2","v3.15-rc4","v3.14","v3.14-rc4","v3.14-rc8","v3.14-rc7","v3.14-rc6","v3.14-rc1","v3.14-rc2","v3.14-rc5","v3.14-rc3","v3.13-rc6","v3.13-rc8","v3.12","v3.13-rc7","v3.13-rc1","v3.13-rc4","v3.13-rc3","v3.13-rc5","v3.13-rc2","v3.12-rc7","v3.12-rc3","v3.12-rc6","v3.12-rc1","v3.12-rc5","v3.11","v3.12-rc2","v3.12-rc4","v3.11-rc7","v3.11-rc2","v3.11-rc5","v3.11-rc1","v3.11-rc3","v3.11-rc4","v3.11-rc6","v3.10-rc2","v3.10","v3.10-rc7","v3.10-rc6","v3.10-rc1","v3.10-rc5","v3.10-rc3","v3.10-rc4","v3.9","v3.9-rc2","v3.9-rc7","v3.9-rc8","v3.9-rc3","v3.9-rc6","v3.9-rc5","v3.9-rc4","v3.9-rc1","v3.8","v3.8-rc7","v3.8-rc6","v3.8-rc5","v3.8-rc2","v3.8-rc1","v3.8-rc3","v3.8-rc4","v3.7","v3.7-rc1","v3.6","v3.7-rc6","v3.7-rc7","v3.7-rc3","v3.7-rc8","v3.7-rc2","v3.7-rc4","v3.7-rc5","v3.6-rc7","v3.6-rc1","v3.5-rc3","v3.6-rc6","v3.6-rc5","v3.5","v3.6-rc3","v3.6-rc4","v3.6-rc2","v3.4-rc4","v3.5-rc7","v3.5-rc5","v3.5-rc6","v3.5-rc2","v3.5-rc1","v3.5-rc4","v3.4","v3.4-rc2","v3.4-rc1","v3.4-rc7","v3.4-rc6","v3.4-rc3","v3.4-rc5","v3.3","v3.3-rc6","v3.3-rc3","v3.3-rc7","v3.3-rc2","v3.3-rc5","v3.2","v3.3-rc4","v3.3-rc1","v3.2-rc4","v3.2-rc7","v3.2-rc6","v3.2-rc5","v3.2-rc3","v3.1","v3.2-rc2","v3.2-rc1","v3.1-rc1","v3.1-rc9","v3.1-rc8","v3.1-rc10","v3.1-rc7","v3.1-rc3","v3.1-rc2","v3.1-rc4","v3.1-rc5","v3.0","v3.1-rc6","v3.0-rc7","v3.0-rc4","v3.0-rc6","v3.0-rc5","v3.0-rc3","v3.0-rc1","v2.6.39","v3.0-rc2","v2.6.38","v2.6.39-rc2","v2.6.39-rc7","v2.6.39-rc5","v2.6.39-rc1","v2.6.38-rc7","v2.6.39-rc6","v2.6.39-rc4","v2.6.39-rc3","v2.6.37","v2.6.38-rc1","v2.6.38-rc8","v2.6.38-rc2","v2.6.38-rc6","v2.6.38-rc5","v2.6.38-rc4","v2.6.38-rc3","v2.6.37-rc4","v2.6.37-rc2","v2.6.36","v2.6.37-rc5","v2.6.37-rc8","v2.6.37-rc7","v2.6.37-rc6","v2.6.37-rc1","v2.6.37-rc3","v2.6.36-rc6","v2.6.35-rc4","v2.6.36-rc8","v2.6.35","v2.6.36-rc7","v2.6.36-rc3","v2.6.36-rc5","v2.6.36-rc4","v2.6.36-rc2","v2.6.36-rc1","v2.6.35-rc5","v2.6.35-rc6","v2.6.34","v2.6.35-rc3","v2.6.35-rc1","v2.6.35-rc2","v2.6.34-rc7","v2.6.34-rc6","v2.6.34-rc5","v2.6.34-rc4","v2.6.34-rc3","v2.6.34-rc2","v2.6.34-rc1","v2.6.33","v2.6.33-rc6","v2.6.33-rc8","v2.6.33-rc4","v2.6.33-rc5","v2.6.33-rc3","v2.6.33-rc7","v2.6.33-rc2","v2.6.32","v2.6.33-rc1","v2.6.32-rc8","v2.6.32-rc7","v2.6.32-rc6","v2.6.31","v2.6.32-rc5","v2.6.32-rc4","v2.6.32-rc2","v2.6.32-rc1","v2.6.32-rc3","v2.6.31-rc9","v2.6.31-rc1","v2.6.31-rc7","v2.6.31-rc8","v2.6.31-rc6","v2.6.30-rc6","v2.6.30","v2.6.31-rc4","v2.6.31-rc5","v2.6.31-rc3","v2.6.31-rc2","v2.6.30-rc7","v2.6.30-rc8","v2.6.30-rc5","v2.6.30-rc3","v2.6.30-rc4","v2.6.30-rc1","v2.6.30-rc2","v2.6.29","v2.6.29-rc8","v2.6.29-rc7","v2.6.29-rc5","v2.6.29-rc1","v2.6.29-rc6","v2.6.29-rc4","v2.6.29-rc3","v2.6.29-rc2","v2.6.28","v2.6.28-rc7","v2.6.28-rc9","v2.6.28-rc8","v2.6.28-rc6","v2.6.28-rc5","v2.6.28-rc4","v2.6.28-rc2","v2.6.28-rc3","v2.6.28-rc1","v2.6.27","v2.6.27-rc7","v2.6.27-rc9","v2.6.27-rc8","v2.6.27-rc5","v2.6.27-rc6","v2.6.27-rc4","v2.6.27-rc1","v2.6.27-rc3","v2.6.27-rc2","v2.6.26","v2.6.26-rc9","v2.6.26-rc8","v2.6.26-rc3","v2.6.26-rc7","v2.6.26-rc6","v2.6.26-rc5","v2.6.26-rc4","v2.6.26-rc2","v2.6.26-rc1","v2.6.25","v2.6.25-rc7","v2.6.25-rc9","v2.6.25-rc8","v2.6.25-rc6","v2.6.25-rc5","v2.6.25-rc3","v2.6.25-rc4","v2.6.24","v2.6.25-rc2","v2.6.25-rc1","v2.6.24-rc8","v2.6.24-rc7","v2.6.24-rc6","v2.6.24-rc5","v2.6.24-rc4","v2.6.24-rc3","v2.6.24-rc2","v2.6.24-rc1","v2.6.23","v2.6.23-rc9","v2.6.23-rc8","v2.6.23-rc5","v2.6.23-rc7","v2.6.23-rc6","v2.6.23-rc4","v2.6.23-rc3","v2.6.23-rc2","v2.6.23-rc1","v2.6.22","v2.6.22-rc7","v2.6.22-rc6","v2.6.22-rc5","v2.6.22-rc4","v2.6.22-rc3","v2.6.22-rc2","v2.6.22-rc1","v2.6.21","v2.6.21-rc7","v2.6.21-rc6","v2.6.21-rc5","v2.6.21-rc4","v2.6.21-rc3","v2.6.21-rc2","v2.6.21-rc1","v2.6.20-rc7","v2.6.20-rc6","v2.6.20-rc5","v2.6.20-rc4","v2.6.20-rc3","v2.6.20-rc1","v2.6.20-rc2","v2.6.19-rc2","v2.6.18","v2.6.19-rc1","v2.6.18-rc6","v2.6.18-rc5","v2.6.18-rc3","v2.6.18-rc2","v2.6.18-rc1","v2.6.17","v2.6.17-rc4","v2.6.17-rc6","v2.6.17-rc5","v2.6.17-rc3","v2.6.17-rc2","v2.6.17-rc1","v2.6.16","v2.6.16-rc6","v2.6.16-rc4","v2.6.16-rc5","v2.6.16-rc3","v2.6.16-rc2","v2.6.16-rc1","v2.6.15-rc7","v2.6.15-rc5","v2.6.15-rc4","v2.6.15-rc2","v2.6.15-rc1","v2.6.14-rc3","v2.6.14-rc2","v2.6.14-rc1","v2.6.13","v2.6.13-rc7","v2.6.13-rc6","v2.6.13-rc5","v2.6.13-rc3","v2.6.13-rc4","v2.6.13-rc2","v2.6.13-rc1","v2.6.12-rc4","v2.6.12-rc3","v2.6.12-rc2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-39860.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.299"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.5.0"},{"fixed":"5.10.243"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.11.0"},{"fixed":"5.15.192"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.151"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.105"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.5.0"},{"fixed":"6.12.46"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.16.6"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-39860.json"}}],"references":[{"type":"WEB","url":"https://cert-portal.siemens.com/productcert/html/ssa-032379.html"},{"type":"WEB","url":"https://cert-portal.siemens.com/productcert/html/ssa-089022.html"},{"type":"WEB","url":"https://git.kernel.org/stable/c/2ca99fc3512a8074de20ee52a87b492dfcc41a4d"},{"type":"WEB","url":"https://git.kernel.org/stable/c/306b0991413b482dbf5585b423022123bb505966"},{"type":"WEB","url":"https://git.kernel.org/stable/c/3dff390f55ccd9ce12e91233849769b5312180c2"},{"type":"WEB","url":"https://git.kernel.org/stable/c/47f6090bcf75c369695d21c3f179db8a56bbbd49"},{"type":"WEB","url":"https://git.kernel.org/stable/c/6077d16b5c0f65d571eee709de2f0541fb5ef0ca"},{"type":"WEB","url":"https://git.kernel.org/stable/c/83e1d9892ef51785cf0760b7681436760dda435a"},{"type":"WEB","url":"https://git.kernel.org/stable/c/862c628108562d8c7a516a900034823b381d3cba"},{"type":"WEB","url":"https://git.kernel.org/stable/c/964cbb198f9c46c2b2358cd1faffc04c1e8248cf"},{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html"},{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39860.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-39860"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39860.json"}}