PT-2025-36296 · Linux+7 · Linux Kernel+7

Published 2025-01-01 · Updated 2026-05-22 · CVE-2025-39702

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains an issue where MAC comparisons were not performed in constant time, potentially allowing timing attacks. The fix involves using an appropriate helper function to ensure constant-time MAC comparison.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Side Channel Attack

Weakness Enumeration

CWE-208

CWE-203

Related Identifiers

ALSA-2025:19409

ALSA-2025:19469

AZL-66941

AZL-73719

BDU:2025-15716

CVE-2025-39702

DLA-4328-1

DSA-6008-1

DSA-6009-1

ECHO-180D-A490-3A57

INFSA-2025_19409

INFSA-2025_21112

MGASA-2025-0234

MGASA-2025-0235

OESA-2026-1341

OESA-2026-2417

OESA-2026-2418

OPENSUSE-SU-2025:20091-1

RHSA-2025:19469

RHSA-2025:21091

RHSA-2025:21112

RHSA-2025:21118

RHSA-2025:21136

RHSA-2025_19409

RHSA-2025_21112

SUSE-SU-2025:21040-1

SUSE-SU-2025:21052-1

SUSE-SU-2025:21056-1

SUSE-SU-2025:21064-1

SUSE-SU-2025:21080-1

SUSE-SU-2025:21147-1

SUSE-SU-2025:21180-1

SUSE-SU-2025:4057-1

SUSE-SU-2025:4128-1

SUSE-SU-2025:4132-1

SUSE-SU-2025:4140-1

SUSE-SU-2025:4141-1

SUSE-SU-2025:4189-1

SUSE-SU-2025:4301-1

USN-7909-1

USN-7909-2

USN-7909-3

USN-7909-4

USN-7909-5

USN-7910-1

USN-7910-2

USN-7933-1

USN-7938-1

USN-8028-1

USN-8028-2

USN-8028-3

USN-8028-4

USN-8028-5

USN-8028-6

USN-8028-7

USN-8028-8

USN-8031-1

USN-8031-2

USN-8031-3

USN-8052-1

USN-8052-2

USN-8074-1

USN-8074-2

USN-8126-1

Affected Products

Almalinux

Debian

Linuxmint

Linux Kernel

Red Hat

Red Os

Suse

Ubuntu

References · 2686

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39702.json · Exploit
• https://ubuntu.com/security/CVE-2025-40026 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40030 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38705 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39835 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39687 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50735 · Security Note
• https://ubuntu.com/security/CVE-2025-40095 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22037 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38097 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38449 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-56760 · Security Note
• https://ubuntu.com/security/CVE-2025-38003 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40329 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8028-1 · Vendor Advisory