CNNVD-202509-2530 Information

Sep 16, 2025 cve

CNNVD ID

CNNVD-202509-2530

CVE-2025-39823

  • CNNVD Published: 2025-09-16

Description (Chinese)

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于未对来自客户端的索引使用array_index_nospec，可能导致推测执行侧信道攻击。

Description (English)

Linux Kernel is the kernel used by Linux, the Open Source Operator System of the Linux Foundation of the United States. Linux Kernel had a security loophole, which stemmed from the failure to use array index nospec for the index from the client, which could lead to a presumed side-link attack.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Linux

Published

2025-09-16

Last Modified

2026-02-24

References

https://git.kernel.org/stable/c/31a0ad2f60cb4816e06218b63e695eb72ce74974 https://git.kernel.org/stable/c/f57a4bd8d6cb5af05b8ac1be9098e249034639fb https://git.kernel.org/stable/c/33e974c2d5a82b2f9d9ba0ad9cbaabc1c8e3985f https://git.kernel.org/stable/c/c87bd4dd43a624109c3cc42d843138378a7f4548 https://git.kernel.org/stable/c/f49161646e03d107ce81a99c6ca5da682fe5fb69 https://git.kernel.org/stable/c/d51e381beed5e2f50f85f49f6c90e023754efa12 https://git.kernel.org/stable/c/72777fc31aa7ab2ce00f44bfa3929c6eabbeaf48 https://git.kernel.org/stable/c/67a05679621b7f721bdba37a5d18665d3aceb695 https://vigilance.fr/vulnerability/Linux-kernel-multiple-vulnerabilities-dated-17-09-2025-48246

Patch

https://www.kernel.org/

Share on: