CVE-2025-39748: bpf: Forget ranges when refining tnum after JSET
Published Sep 11, 2025
·Updated
bpf: Forget ranges when refining tnum after JSET
Affected Software
10 affected components
Linux Kernel
Microsoft azl3 kernel 6.6.96.2-2
Microsoft azl3 kernel 6.6.104.2-4
Linux Linux kernel<6.12.43
Linux Linux kernel>=6.13<6.15.11
Linux Linux kernel>=6.16<6.16.2
Microsoft azl3 kernel 6.6.112.1-2
Microsoft cbl2 kernel 5.15.186.1-1
Microsoft azl3 kernel 6.6.117.1-1
Microsoft azl3 kernel 6.6.119.3-1
Event History
Sep 11, 2025
CVE Published
via MITRE·04:52 PM
Data Sourced
via MITRE·04:52 PM
Description
Data Sourced
via NVD·05:15 PM
RemedyDescriptionSeverityAffected Software
Sep 13, 2025
Data Sourced
via Microsoft·01:03 AM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·01:03 AM
DescriptionSeverity
Updated
via Microsoft·01:03 AM
Affected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-39748?
CVE-2025-39748 has been classified with a severity level that indicates it poses a potential risk to system stability.
2
How do I fix CVE-2025-39748?
To fix CVE-2025-39748, you should update your Linux kernel to the latest stable version that includes the security patches.
3
What systems are affected by CVE-2025-39748?
CVE-2025-39748 affects various versions of the Linux kernel, particularly those that utilize BPF programs.
4
What type of vulnerability is CVE-2025-39748?
CVE-2025-39748 is a kernel vulnerability related to a range invariant violation in the BPF (Berkeley Packet Filter) implementation.
5
Is CVE-2025-39748 easy to exploit?
Exploitation of CVE-2025-39748 requires specific conditions and access to the kernel, making it less straightforward than many other vulnerabilities.