{ "document": { "aggregate_severity": { "text": "High" }, "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/debian10els/vex/2025/cve-2025-39913-els_os-debian10els.json" } ], "tracking": { "current_release_date": "2026-08-25T12:54:57Z", "generator": { "date": "2026-08-25T12:54:57Z", "engine": { "name": "pyCSAF" } }, "id": "CVE-2025-39913-ELS_OS-DEBIAN10ELS", "initial_release_date": "2025-10-01T08:15:00Z", "revision_history": [ { "date": "2025-10-01T08:15:00Z", "number": "1", "summary": "Initial version" }, { "date": "2026-08-25T12:54:57Z", "number": "2", "summary": "Official Publication" } ], "status": "final", "version": "2" }, "title": "Security update on CVE-2025-39913" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Debian 10", "product": { "name": "Debian 10", "product_id": "Debian-10", "product_identification_helper": { "cpe": "cpe:2.3:o:debian:debian_linux:10:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Debian" } ], "category": "vendor", "name": "Software in the Public Interest, Inc." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "linux-headers-4.19.0-28-all-amd64-0:4.19.325-1+tuxcare.els1.amd64", "product": { "name": "linux-headers-4.19.0-28-all-amd64-0:4.19.325-1+tuxcare.els1.amd64", "product_id": "linux-headers-4.19.0-28-all-amd64-0:4.19.325-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/linux-headers-4.19.0-28-all-amd64@4.19.325-1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "linux-libc-dev-0:4.19.325-1+tuxcare.els1.amd64", "product": { "name": "linux-libc-dev-0:4.19.325-1+tuxcare.els1.amd64", "product_id": "linux-libc-dev-0:4.19.325-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/linux-libc-dev@4.19.325-1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "libcpupower1-0:4.19.325-1+tuxcare.els1.amd64", "product": { "name": "libcpupower1-0:4.19.325-1+tuxcare.els1.amd64", "product_id": "libcpupower1-0:4.19.325-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libcpupower1@4.19.325-1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "libcpupower-dev-0:4.19.325-1+tuxcare.els1.amd64", "product": { "name": "libcpupower-dev-0:4.19.325-1+tuxcare.els1.amd64", "product_id": "libcpupower-dev-0:4.19.325-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libcpupower-dev@4.19.325-1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "libbpf-dev-0:4.19.325-1+tuxcare.els1.amd64", "product": { "name": "libbpf-dev-0:4.19.325-1+tuxcare.els1.amd64", "product_id": "libbpf-dev-0:4.19.325-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libbpf-dev@4.19.325-1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "linux-perf-4.19-0:4.19.325-1+tuxcare.els1.amd64", "product": { "name": "linux-perf-4.19-0:4.19.325-1+tuxcare.els1.amd64", "product_id": "linux-perf-4.19-0:4.19.325-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/linux-perf-4.19@4.19.325-1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "linux-config-4.19-0:4.19.325-1+tuxcare.els1.amd64", "product": { "name": "linux-config-4.19-0:4.19.325-1+tuxcare.els1.amd64", "product_id": "linux-config-4.19-0:4.19.325-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/linux-config-4.19@4.19.325-1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "linux-kbuild-4.19-0:4.19.325-1+tuxcare.els1.amd64", "product": { "name": "linux-kbuild-4.19-0:4.19.325-1+tuxcare.els1.amd64", "product_id": "linux-kbuild-4.19-0:4.19.325-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/linux-kbuild-4.19@4.19.325-1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "libbpf4.19-0:4.19.325-1+tuxcare.els1.amd64", "product": { "name": "libbpf4.19-0:4.19.325-1+tuxcare.els1.amd64", "product_id": "libbpf4.19-0:4.19.325-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libbpf4.19@4.19.325-1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "linux-compiler-gcc-8-x86-0:4.19.325-1+tuxcare.els1.amd64", "product": { "name": "linux-compiler-gcc-8-x86-0:4.19.325-1+tuxcare.els1.amd64", "product_id": "linux-compiler-gcc-8-x86-0:4.19.325-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/linux-compiler-gcc-8-x86@4.19.325-1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "linux-headers-4.19.0-28-all-0:4.19.325-1+tuxcare.els1.amd64", "product": { "name": "linux-headers-4.19.0-28-all-0:4.19.325-1+tuxcare.els1.amd64", "product_id": "linux-headers-4.19.0-28-all-0:4.19.325-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/linux-headers-4.19.0-28-all@4.19.325-1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "linux-image-amd64-signed-template-0:4.19.325-1+tuxcare.els1.amd64", "product": { "name": "linux-image-amd64-signed-template-0:4.19.325-1+tuxcare.els1.amd64", "product_id": "linux-image-amd64-signed-template-0:4.19.325-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/linux-image-amd64-signed-template@4.19.325-1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "linux-cpupower-0:4.19.325-1+tuxcare.els1.amd64", "product": { "name": "linux-cpupower-0:4.19.325-1+tuxcare.els1.amd64", "product_id": "linux-cpupower-0:4.19.325-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/linux-cpupower@4.19.325-1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "linux-headers-4.19.0-28-amd64-0:4.19.325-1+tuxcare.els1.amd64", "product": { "name": "linux-headers-4.19.0-28-amd64-0:4.19.325-1+tuxcare.els1.amd64", "product_id": "linux-headers-4.19.0-28-amd64-0:4.19.325-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/linux-headers-4.19.0-28-amd64@4.19.325-1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "hyperv-daemons-0:4.19.325-1+tuxcare.els1.amd64", "product": { "name": "hyperv-daemons-0:4.19.325-1+tuxcare.els1.amd64", "product_id": "hyperv-daemons-0:4.19.325-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/hyperv-daemons@4.19.325-1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "linux-image-4.19.0-28-amd64-unsigned-0:4.19.325-1+tuxcare.els1.amd64", "product": { "name": "linux-image-4.19.0-28-amd64-unsigned-0:4.19.325-1+tuxcare.els1.amd64", "product_id": "linux-image-4.19.0-28-amd64-unsigned-0:4.19.325-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/linux-image-4.19.0-28-amd64-unsigned@4.19.325-1%2Btuxcare.els1?arch=amd64" } } } ], "category": "architecture", "name": "amd64" }, { "branches": [ { "category": "product_version", "name": "linux-doc-4.19-0:4.19.325-1+tuxcare.els1.all", "product": { "name": "linux-doc-4.19-0:4.19.325-1+tuxcare.els1.all", "product_id": "linux-doc-4.19-0:4.19.325-1+tuxcare.els1.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/linux-doc-4.19@4.19.325-1%2Btuxcare.els1?arch=all" } } }, { "category": "product_version", "name": "linux-support-4.19.0-28-0:4.19.325-1+tuxcare.els1.all", "product": { "name": "linux-support-4.19.0-28-0:4.19.325-1+tuxcare.els1.all", "product_id": "linux-support-4.19.0-28-0:4.19.325-1+tuxcare.els1.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/linux-support-4.19.0-28@4.19.325-1%2Btuxcare.els1?arch=all" } } }, { "category": "product_version", "name": "linux-source-4.19-0:4.19.325-1+tuxcare.els1.all", "product": { "name": "linux-source-4.19-0:4.19.325-1+tuxcare.els1.all", "product_id": "linux-source-4.19-0:4.19.325-1+tuxcare.els1.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/linux-source-4.19@4.19.325-1%2Btuxcare.els1?arch=all" } } }, { "category": "product_version", "name": "linux-headers-4.19.0-28-common-0:4.19.325-1+tuxcare.els1.all", "product": { "name": "linux-headers-4.19.0-28-common-0:4.19.325-1+tuxcare.els1.all", "product_id": "linux-headers-4.19.0-28-common-0:4.19.325-1+tuxcare.els1.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/linux-headers-4.19.0-28-common@4.19.325-1%2Btuxcare.els1?arch=all" } } } ], "category": "architecture", "name": "all" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "linux-headers-4.19.0-28-all-amd64-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:linux-headers-4.19.0-28-all-amd64-0:4.19.325-1+tuxcare.els1.amd64" }, "product_reference": "linux-headers-4.19.0-28-all-amd64-0:4.19.325-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-libc-dev-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:linux-libc-dev-0:4.19.325-1+tuxcare.els1.amd64" }, "product_reference": "linux-libc-dev-0:4.19.325-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcpupower1-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:libcpupower1-0:4.19.325-1+tuxcare.els1.amd64" }, "product_reference": "libcpupower1-0:4.19.325-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-doc-4.19-0:4.19.325-1+tuxcare.els1.all as a component of Debian 10", "product_id": "Debian-10:linux-doc-4.19-0:4.19.325-1+tuxcare.els1.all" }, "product_reference": "linux-doc-4.19-0:4.19.325-1+tuxcare.els1.all", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcpupower-dev-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:libcpupower-dev-0:4.19.325-1+tuxcare.els1.amd64" }, "product_reference": "libcpupower-dev-0:4.19.325-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libbpf-dev-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:libbpf-dev-0:4.19.325-1+tuxcare.els1.amd64" }, "product_reference": "libbpf-dev-0:4.19.325-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-perf-4.19-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:linux-perf-4.19-0:4.19.325-1+tuxcare.els1.amd64" }, "product_reference": "linux-perf-4.19-0:4.19.325-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-config-4.19-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:linux-config-4.19-0:4.19.325-1+tuxcare.els1.amd64" }, "product_reference": "linux-config-4.19-0:4.19.325-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-kbuild-4.19-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:linux-kbuild-4.19-0:4.19.325-1+tuxcare.els1.amd64" }, "product_reference": "linux-kbuild-4.19-0:4.19.325-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libbpf4.19-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:libbpf4.19-0:4.19.325-1+tuxcare.els1.amd64" }, "product_reference": "libbpf4.19-0:4.19.325-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-support-4.19.0-28-0:4.19.325-1+tuxcare.els1.all as a component of Debian 10", "product_id": "Debian-10:linux-support-4.19.0-28-0:4.19.325-1+tuxcare.els1.all" }, "product_reference": "linux-support-4.19.0-28-0:4.19.325-1+tuxcare.els1.all", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-source-4.19-0:4.19.325-1+tuxcare.els1.all as a component of Debian 10", "product_id": "Debian-10:linux-source-4.19-0:4.19.325-1+tuxcare.els1.all" }, "product_reference": "linux-source-4.19-0:4.19.325-1+tuxcare.els1.all", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-compiler-gcc-8-x86-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:linux-compiler-gcc-8-x86-0:4.19.325-1+tuxcare.els1.amd64" }, "product_reference": "linux-compiler-gcc-8-x86-0:4.19.325-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-headers-4.19.0-28-all-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:linux-headers-4.19.0-28-all-0:4.19.325-1+tuxcare.els1.amd64" }, "product_reference": "linux-headers-4.19.0-28-all-0:4.19.325-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-image-amd64-signed-template-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:linux-image-amd64-signed-template-0:4.19.325-1+tuxcare.els1.amd64" }, "product_reference": "linux-image-amd64-signed-template-0:4.19.325-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-headers-4.19.0-28-common-0:4.19.325-1+tuxcare.els1.all as a component of Debian 10", "product_id": "Debian-10:linux-headers-4.19.0-28-common-0:4.19.325-1+tuxcare.els1.all" }, "product_reference": "linux-headers-4.19.0-28-common-0:4.19.325-1+tuxcare.els1.all", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-cpupower-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:linux-cpupower-0:4.19.325-1+tuxcare.els1.amd64" }, "product_reference": "linux-cpupower-0:4.19.325-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-headers-4.19.0-28-amd64-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:linux-headers-4.19.0-28-amd64-0:4.19.325-1+tuxcare.els1.amd64" }, "product_reference": "linux-headers-4.19.0-28-amd64-0:4.19.325-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "hyperv-daemons-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:hyperv-daemons-0:4.19.325-1+tuxcare.els1.amd64" }, "product_reference": "hyperv-daemons-0:4.19.325-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-image-4.19.0-28-amd64-unsigned-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:linux-image-4.19.0-28-amd64-unsigned-0:4.19.325-1+tuxcare.els1.amd64" }, "product_reference": "linux-image-4.19.0-28-amd64-unsigned-0:4.19.325-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" } ] }, "vulnerabilities": [ { "cve": "CVE-2025-39913", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork.\n\nsyzbot reported the splat below. [0]\n\nThe repro does the following:\n\n 1. Load a sk_msg prog that calls bpf_msg_cork_bytes(msg, cork_bytes)\n 2. Attach the prog to a SOCKMAP\n 3. Add a socket to the SOCKMAP\n 4. Activate fault injection\n 5. Send data less than cork_bytes\n\nAt 5., the data is carried over to the next sendmsg() as it is\nsmaller than the cork_bytes specified by bpf_msg_cork_bytes().\n\nThen, tcp_bpf_send_verdict() tries to allocate psock->cork to hold\nthe data, but this fails silently due to fault injection + __GFP_NOWARN.\n\nIf the allocation fails, we need to revert the sk->sk_forward_alloc\nchange done by sk_msg_alloc().\n\nLet's call sk_msg_free() when tcp_bpf_send_verdict fails to allocate\npsock->cork.\n\nThe \"*copied\" also needs to be updated such that a proper error can\nbe returned to the caller, sendmsg. It fails to allocate psock->cork.\nNothing has been corked so far, so this patch simply sets \"*copied\"\nto 0.\n\n[0]:\nWARNING: net/ipv4/af_inet.c:156 at inet_sock_destruct+0x623/0x730 net/ipv4/af_inet.c:156, CPU#1: syz-executor/5983\nModules linked in:\nCPU: 1 UID: 0 PID: 5983 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full)\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025\nRIP: 0010:inet_sock_destruct+0x623/0x730 net/ipv4/af_inet.c:156\nCode: 0f 0b 90 e9 62 fe ff ff e8 7a db b5 f7 90 0f 0b 90 e9 95 fe ff ff e8 6c db b5 f7 90 0f 0b 90 e9 bb fe ff ff e8 5e db b5 f7 90 <0f> 0b 90 e9 e1 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 9f fc\nRSP: 0018:ffffc90000a08b48 EFLAGS: 00010246\nRAX: ffffffff8a09d0b2 RBX: dffffc0000000000 RCX: ffff888024a23c80\nRDX: 0000000000000100 RSI: 0000000000000fff RDI: 0000000000000000\nRBP: 0000000000000fff R08: ffff88807e07c627 R09: 1ffff1100fc0f8c4\nR10: dffffc0000000000 R11: ffffed100fc0f8c5 R12: ffff88807e07c380\nR13: dffffc0000000000 R14: ffff88807e07c60c R15: 1ffff1100fc0f872\nFS: 00005555604c4500(0000) GS:ffff888125af1000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00005555604df5c8 CR3: 0000000032b06000 CR4: 00000000003526f0\nCall Trace:\n \n __sk_destruct+0x86/0x660 net/core/sock.c:2339\n rcu_do_batch kernel/rcu/tree.c:2605 [inline]\n rcu_core+0xca8/0x1770 kernel/rcu/tree.c:2861\n handle_softirqs+0x286/0x870 kernel/softirq.c:579\n __do_softirq kernel/softirq.c:613 [inline]\n invoke_softirq kernel/softirq.c:453 [inline]\n __irq_exit_rcu+0xca/0x1f0 kernel/softirq.c:680\n irq_exit_rcu+0x9/0x30 kernel/softirq.c:696\n instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1052 [inline]\n sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1052\n ", "title": "Vulnerability description" }, { "category": "other", "text": "TuxCare has assessed that this vulnerability does not impact any currently supported TuxCare products. This evaluation may change as new information becomes available. For additional details regarding this vulnerability and affected products, refer to the provided references.", "title": "Statement" } ], "product_status": { "known_not_affected": [ "Debian-10:hyperv-daemons-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:libbpf-dev-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:libbpf4.19-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:libcpupower-dev-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:libcpupower1-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-compiler-gcc-8-x86-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-config-4.19-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-cpupower-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-doc-4.19-0:4.19.325-1+tuxcare.els1.all", "Debian-10:linux-headers-4.19.0-28-all-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-headers-4.19.0-28-all-amd64-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-headers-4.19.0-28-amd64-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-headers-4.19.0-28-common-0:4.19.325-1+tuxcare.els1.all", "Debian-10:linux-image-4.19.0-28-amd64-unsigned-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-image-amd64-signed-template-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-kbuild-4.19-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-libc-dev-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-perf-4.19-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-source-4.19-0:4.19.325-1+tuxcare.els1.all", "Debian-10:linux-support-4.19.0-28-0:4.19.325-1+tuxcare.els1.all" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-39913" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/05366527f44cf4b884f3d9462ae8009be9665856", "url": "https://git.kernel.org/stable/c/05366527f44cf4b884f3d9462ae8009be9665856" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/08f58d10f5abf11d297cc910754922498c921f91", "url": "https://git.kernel.org/stable/c/08f58d10f5abf11d297cc910754922498c921f91" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/539920180c55f5e13a2488a2339f94e6b8cb69e0", "url": "https://git.kernel.org/stable/c/539920180c55f5e13a2488a2339f94e6b8cb69e0" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/66bcb04a441fbf15d66834b7e3eefb313dd750c8", "url": "https://git.kernel.org/stable/c/66bcb04a441fbf15d66834b7e3eefb313dd750c8" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/7429b8b9bfbc276fd304fbaebc405f46b421fedf", "url": "https://git.kernel.org/stable/c/7429b8b9bfbc276fd304fbaebc405f46b421fedf" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/9c2a6456bdf9794474460d885c359b6c4522d6e3", "url": "https://git.kernel.org/stable/c/9c2a6456bdf9794474460d885c359b6c4522d6e3" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a3967baad4d533dc254c31e0d221e51c8d223d58", "url": "https://git.kernel.org/stable/c/a3967baad4d533dc254c31e0d221e51c8d223d58" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/de89e58368f8f07df005ecc1c86ad94898a999f2", "url": "https://git.kernel.org/stable/c/de89e58368f8f07df005ecc1c86ad94898a999f2" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" }, { "category": "external", "summary": "https://cert-portal.siemens.com/productcert/html/ssa-253495.html", "url": "https://cert-portal.siemens.com/productcert/html/ssa-253495.html" } ], "release_date": "2025-10-01T08:15:00Z", "threats": [ { "category": "impact", "details": "Important" }, { "category": "impact", "date": "2026-08-01T15:54:06.821741Z", "details": "Not affected: the BPF sockmap TCP send path (net/ipv4/tcp_bpf.c, tcp_bpf_send_verdict) was introduced upstream in v4.20 by commit 4f738adba30a; debian10els ships the older 4.19 kernel with no tcp_bpf.c, so the flaw was never introduced.", "product_ids": [ "Debian-10:hyperv-daemons-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:libbpf-dev-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:libbpf4.19-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:libcpupower-dev-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:libcpupower1-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-compiler-gcc-8-x86-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-config-4.19-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-cpupower-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-doc-4.19-0:4.19.325-1+tuxcare.els1.all", "Debian-10:linux-headers-4.19.0-28-all-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-headers-4.19.0-28-all-amd64-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-headers-4.19.0-28-amd64-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-headers-4.19.0-28-common-0:4.19.325-1+tuxcare.els1.all", "Debian-10:linux-image-4.19.0-28-amd64-unsigned-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-image-amd64-signed-template-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-kbuild-4.19-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-libc-dev-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-perf-4.19-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-source-4.19-0:4.19.325-1+tuxcare.els1.all", "Debian-10:linux-support-4.19.0-28-0:4.19.325-1+tuxcare.els1.all" ] } ] } ] }