CVE-2025-39839: debian debian_linux Out-of-bounds Read
Vulnerability summary
CVE-2025-39839 is a high (CVSS 8.8) Out-of-bounds Read vulnerability in debian debian_linux. EPSS estimates a 0.26% chance of exploitation in the next 30 days, higher than 16.5% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 38 · Related 34Timeline
- 19-09-2025PublishedVulnerability first disclosed.
- 05-08-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: batman-adv: fix OOB read/write in network-coding decode batadv_nc_skb_decode_packet() trusts coded_len and checks only against skb->len. XOR starts at sizeof(struct batadv_unicast_packet), reducing payload headroom, and the source skb length is not verified, allowing an out-of-bounds read and a small out-of-bounds write. Validate that coded_len fits within the payload area of both destination and source sk_buffs before XORing.
CVSS metrics
4 scores · 4 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated8.8HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.1HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HDiffers
- NVDNIST7.1HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HDiffers
EPSS trend
Probability
0.26%
Chance of exploitation in the next 30 days
Percentile
17%
Versus all other CVEs
30-day change
+0.01 pp
From 0.25% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu148 products
- linuxAll versions (No fix recorded) | < 5.15.0-163.173 | < 6.8.0-106.106
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded) | < 5.15.0-1097.104 | < 6.8.0-1050.53
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Debian2 products
- linux< 6.1.153-1 | < 6.12.48-1 | < 6.16.6-1
- debian_linuxEOL11.0
Linux2 products
- linux≥ 2df5278b0267c799f3e877e8eeddbb6e93cda0bb, < 30fc47248f02b8a14a61df469e1da4704be1a19f | ≥ 2df5278b0267c799f3e877e8eeddbb6e93cda0bb, < 1e36c6c8dc8023b4bbe9a16e819f9998b9b6a183 | ≥ 2df5278b0267c799f3e877e8eeddbb6e93cda0bb, < 5d334bce9fad58cf328d8fa14ea1fff855819863 | ≥ 2df5278b0267c799f3e877e8eeddbb6e93cda0bb, < dce6c2aa70e94c04c523b375dfcc664d7a0a560a | ≥ 2df5278b0267c799f3e877e8eeddbb6e93cda0bb, < bb37252c9af1cb250f34735ee98f80b46be3cef1 | ≥ 2df5278b0267c799f3e877e8eeddbb6e93cda0bb, < 20080709457bc1e920eb002483d7d981d9b2ac1c | ≥ 2df5278b0267c799f3e877e8eeddbb6e93cda0bb, < a67c6397fcb7e842d3c595243049940970541c48 | ≥ 2df5278b0267c799f3e877e8eeddbb6e93cda0bb, < d77b6ff0ce35a6d0b0b7b9581bc3f76d041d4087 | 3.10
- linux_kernel≥ 3.10, < 5.4.299 | ≥ 5.5, < 5.10.243 | ≥ 5.11, < 5.15.192 | ≥ 5.16, < 6.1.151 | ≥ 6.2, < 6.6.105 | ≥ 6.7, < 6.12.46 | ≥ 6.13, < 6.16.6 | 6.17:rc1 | 6.17:rc2 | 6.17:rc3 | 6.17:rc4
3 vendors · 152 products
