PT-2025-40093 · Linux+1 · Linux Kernel+1

Published 2025-08-27 · Updated 2025-10-01 · CVE-2025-39919

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains an issue where non-station wcid entries could be incorrectly passed to receive (rx) functions. This could lead to corruption within the wcid array due to improper pointer casting using the container of function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2026-04328

CVE-2025-39919

Affected Products

Astra Linux

Linux Kernel

References · 17

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39919.json · Exploit
• https://git.kernel.org/stable/c/69dcc19048fcdc3fb166fd25b805470ee8fc0eb1 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-39919 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-04328 · Security Note
• https://cve.org/CVERecord?id=CVE-2025-39919 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2025-39919 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39919 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-39919 · Security Note
• https://git.kernel.org/stable/c/4a522b01e368eec58d182ecc47d24f49a39e440d · Patch
• https://osv.dev/vulnerability/CVE-2025-39919 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-39919 · Vendor Advisory
• https://t.me/CVEtracker/33796 · Telegram Post
• https://lore.kernel.org/linux-cve-announce/2025100119-CVE-2025-39919-b28a@gregkh · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://git.kernel.org/linus/4a522b01e368eec58d182ecc47d24f49a39e440d · Note