Skip to content

Kernel CVES Analysis Sept17 2025 CVE-2025-39797 CVE-2025-39798 CVE-20… #58

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 2 commits into
base: main
Choose a base branch
from
Open

Kernel CVES Analysis Sept17 2025 CVE-2025-39797 CVE-2025-39798 CVE-20… #58

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
abab191
Kernel CVES Analysis Sept17 2025 CVE-2025-39797 CVE-2025-39798 CVE-20…
amitu314 Sep 17, 2025
9f4c7bb
addressed comments from dmell |CVE-2025-39838,CVE-2025-39857,CVE-2025…
amitu314 Oct 2, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 8 additions & 0 deletions vulns/CVE-2025-39797.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,8 @@
reachability: Local
memory_corruption: no
bug_class: dropped packets
impact: Availability and Data Integrity issue
privileges_required: yes
notes: Dropped packets can cause availability issue. Also, worth noting that packets being dropped can interfere with data so Integrity is also impacted. CONFIG_XFRM needs to be enabled for exploitation
author: Microsoft
version: 0.1
8 changes: 8 additions & 0 deletions vulns/CVE-2025-39798.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,8 @@
reachability: Local
memory_corruption: no
bug_class: Permissions, Privileges, and Access Controls (Incorrect capabilities assignment after new mounting)
impact: Potential unauthorized access
privileges_required: yes
notes: This is likely a bug not a security vulnerability. However, argument can be made that if capabilities are not set correctly, this could lead to unauthorized access (long shot possibility). CONFIG_NFS_FS or CONFIG_NFS_V4 or CONFIG_NFS_V3 need to be enabled for exploitation
author: Microsoft
version: 0.1
8 changes: 8 additions & 0 deletions vulns/CVE-2025-39799.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,8 @@
reachability: Local
memory_corruption: no
bug_class: Incorrect Control Flow Implementation
impact: Potential crash
privileges_required: yes
notes: This will likely cause kernel warning. Possibility of kernel panic or crash is remote (and less probable) and would happen by flooding the logs with warning messages
author: Microsoft
version: 0.1