CVE-2025-39715parisc: Revise gateway LWS calls to probe user read access
- 5.5MediumCVSS base score
- 0.16%Exploitation in 30 daysEPSS · top 95% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: parisc: Revise gateway LWS calls to probe user read access We use load and stbys,e instructions to trigger memory reference interruptions without writing to memory. Because of the way read access support is implemented, read access interruptions are only triggered at privilege levels 2 and 3. The kernel and gateway page execute at privilege level 0, so this code never triggers a read access interruption. Thus, it is currently possible for user code to execute a LWS compare and swap operation at an address that is read protected at privilege level 3 (PRIV_USER). Fix this by probing read access rights at privilege level 3 and branching to lws_fault if access isn't allowed.
Timeline
ID reserved
By Linux
- 5 months later
· 5 months later
Published
- 8 months later
· 8 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.16% · top 95% of all CVEs (14 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.
Affected products
- affected d0585d742ff2d82accd26c661c60a6d260429c4a – < e8b496c52aa0c6572d88db7cab85aeea6f9c194d
- affected d0585d742ff2d82accd26c661c60a6d260429c4a – < 8bccf47adbf658293528e86960e6d6f736b1c9f7
- affected d0585d742ff2d82accd26c661c60a6d260429c4a – < bc0a24c24ceebabb5ba65900e332233d79e625e6
- affected d0585d742ff2d82accd26c661c60a6d260429c4a – < 9b6af875baba9c4679b55f4561e201485451305f
- affected d0585d742ff2d82accd26c661c60a6d260429c4a – < f6334f4ae9a4e962ba74b026e1d965dfdf8cbef8
- affected 5.17
- unaffected < 5.17
- unaffected 6.1.149 – ≤ 6.1.*
- unaffected 6.6.103 – ≤ 6.6.*
- unaffected 6.12.44 – ≤ 6.12.*
- unaffected 6.16.4 – ≤ 6.16.*
- unaffected 6.17 – ≤ *
References
References7
- https://git.kernel.org/stable/c/e8b496c52aa0c6572d88db7cab85aeea6f9c194d (opens in a new tab)
- https://git.kernel.org/stable/c/8bccf47adbf658293528e86960e6d6f736b1c9f7 (opens in a new tab)
- https://git.kernel.org/stable/c/bc0a24c24ceebabb5ba65900e332233d79e625e6 (opens in a new tab)
- https://git.kernel.org/stable/c/9b6af875baba9c4679b55f4561e201485451305f (opens in a new tab)
- https://git.kernel.org/stable/c/f6334f4ae9a4e962ba74b026e1d965dfdf8cbef8 (opens in a new tab)
- https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html (opens in a new tab)
- https://cert-portal.siemens.com/productcert/html/ssa-032379.html (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2025-31512 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2025-39715)Record last updated .