CVE-2025-39839: batman-adv: fix OOB read/write in network-coding decode
Published Sep 19, 2025
·Updated
batman-adv: fix OOB read/write in network-coding decode
Affected Software
16 affected componentsFixes available
Linux Linux kernel
Microsoft azl3 kernel 6.6.96.2-2
Linux Linux kernel>=3.10<5.4.299
Linux Linux kernel>=5.5<5.10.243
Linux Linux kernel>=5.11<5.15.192
Linux Linux kernel>=5.16<6.1.151
Linux Linux kernel>=6.2<6.6.105
Linux Linux kernel>=6.7<6.12.46
Linux Linux kernel>=6.13<6.16.6
Linux Linux kernel=6.17-rc1
Linux Linux kernel=6.17-rc2
Linux Linux kernel=6.17-rc3
Linux Linux kernel=6.17-rc4
Debian Debian Linux=11.0
Microsoft azl3 kernel 6.6.104.2-4
Microsoft cbl2 kernel 5.15.186.1-1
Event History
Sep 19, 2025
CVE Published
via MITRE·03:26 PM
Data Sourced
via MITRE·03:26 PM
DescriptionSeverity
Data Sourced
via NVD·04:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Sep 21, 2025
Data Sourced
via Microsoft·01:01 AM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·08:01 AM
Affected Software
Updated
via Microsoft·08:01 AM
DescriptionSeverity
Updated
via Microsoft·08:01 AM
SeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-39839?
The severity of CVE-2025-39839 is classified as high due to potential out-of-bounds read/write vulnerabilities.
2
How do I fix CVE-2025-39839?
To fix CVE-2025-39839, update your Linux kernel to a version that includes the patch addressing this vulnerability.
3
What type of vulnerability is CVE-2025-39839?
CVE-2025-39839 is an out-of-bounds read/write vulnerability found in the batman-adv network coding component of the Linux kernel.
4
Which Linux kernel versions are affected by CVE-2025-39839?
CVE-2025-39839 affects specific versions of the Linux kernel that contain the batman-adv module prior to patching.
5
What does the batadv_nc_skb_decode_packet() function do in relation to CVE-2025-39839?
In relation to CVE-2025-39839, the batadv_nc_skb_decode_packet() function improperly trusts coded_len, leading to potential out-of-bounds vulnerabilities.