CVE-2025-39702 Linux — Exploit & Vulnerability Details HIGH

Parameter	Value
CVSS	7.0 (HIGH)
Affected Versions	4.10 — 6.6.103
Fixed In	5.15.190
Type	CWE-203
Vendor	Linux
Public PoC	No

In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this.

Attack Parameters

Attack Vector

Local

Requires local access

Attack Complexity

High

Difficult to exploit

Privileges Required

Low

Basic privileges needed

User Interaction

None

No user interaction needed

Impact Assessment

Confidentiality

High

Complete data leak

Integrity

High

Complete data modification

Availability

High

Complete denial of service

CVSS Vector v3.1

Weakness Type (CWE)

CWE-203

Vulnerable Products 8

Configuration	From (including)	Up to (excluding)
Linux Linux_Kernel cpe:2.3:o:linux:linux_kernel::::::::	`4.10`	`5.15.190`
Linux Linux_Kernel cpe:2.3:o:linux:linux_kernel::::::::	`5.16`	`6.1.149`
Linux Linux_Kernel cpe:2.3:o:linux:linux_kernel::::::::	`6.2`	`6.6.103`
Linux Linux_Kernel cpe:2.3:o:linux:linux_kernel::::::::	`6.7`	`6.12.44`
Linux Linux_Kernel cpe:2.3:o:linux:linux_kernel::::::::	`6.13`	`6.16.4`
Linux Linux_Kernel cpe:2.3:o:linux:linux_kernel:6.17:rc1::::::	—	—
Linux Linux_Kernel cpe:2.3:o:linux:linux_kernel:6.17:rc2::::::	—	—
Debian Debian_Linux cpe:2.3:o:debian:debian_linux:11.0:::::::*	—	—