CVE-2025-39962CWE-787

CVE-2025-39962

High · published October 9, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
15.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

rxrpc: Fix untrusted unsigned subtract

Fix the following Smatch static checker warning:

net/rxrpc/rxgk_app.c:65 rxgk_yfs_decode_ticket()

warn: untrusted unsigned subtract. 'ticket_len - 10 * 4'

by prechecking the length of what we're trying to extract in two places in

the token and decoding for a response packet.

Also use sizeof() on the struct we're extracting rather specifying the size

numerically to be consistent with the other related statements.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00246 · 15.0th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2025-10-09T17:15Z
Affected products (7)
ProductVersionsFixed in
linux/linux_kernel≥ 6.16, < 6.16.96.16.9
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (2)
EPSS history
Timeline
  • 09 OCT 12:13Z
    rxrpc: Fix untrusted unsigned subtract
    cvelistv5