Search/CVE-2025-39866
● CVE — High

CVE-2025-39866

Vendordebian, linuxProductdebian linux, linux kernelDiscoveredSep 19, 2025UpdatedJul 30, 2026

In the Linux kernel, the following vulnerability has been resolved: fs: writeback: fix use-after-free in __mark_inode_dirty() An use-after-free issue occurred when __mark_inode_dirty() get the bdi_writeback that was in the progress of switching. CPU: 1 PID: 562 Comm: systemd-random- Not tainted 6.6.56-gb4403bd46a8e #1 ...... pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : __mark_inode_dirty+0x124/0x418 lr : __mark_inode_dirty+0x118/0x418 sp : ffffffc08c9dbbc0 ........ Call trace: __mark_inode_dirty+0x124/0x418 generic_update_time+0x4c/0x60 file_modified+0xcc/0xd0 ext4_buffered_write_iter+0x58/0x124 ext4_file_write_iter+0x54/0x704 vfs_write+0x1c0/0x308 ksys_write+0x74/0x10c __arm64_sys_write+0x1c/0x28 invoke_syscall+0x48/0x114 el0_svc_common.constprop.0+0xc0/0xe0…

View graph Watch Export
CVSS v3.1
7.8 HIGH
EPSS
0.31%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
18
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Oct 22, 2026
▲ 0.03pp
0.29% → 0.31% over 3 tracked changes
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Connections
21 relationships
Timeline
disclosure → media coverage
Sep 19, 2025
Disclosure — published as a CVE record. · last revised by NVD Jul 30, 2026
Dec 4, 2025
ubuntu.com reports: USN-7909-1: Linux kernel vulnerabilities
Dec 4, 2025
ubuntu.com reports: USN-7909-2: Linux kernel (Real-time) vulnerabilities
Dec 4, 2025
ubuntu.com reports: USN-7909-3: Linux kernel (FIPS) vulnerabilities
Dec 4, 2025
ubuntu.com reports: USN-7910-1: Linux kernel (Azure FIPS) vulnerabilities
Dec 5, 2025
ubuntu.com reports: USN-7909-4: Linux kernel vulnerabilities
Dec 5, 2025
ubuntu.com reports: USN-7910-2: Linux kernel (Azure) vulnerabilities
Dec 15, 2025
ubuntu.com reports: USN-7933-1: Linux kernel (KVM) vulnerabilities
Dec 15, 2025
ubuntu.com reports: USN-7909-5: Linux kernel (Raspberry Pi) vulnerabilities
Dec 16, 2025
ubuntu.com reports: USN-7938-1: Linux kernel (Azure) vulnerabilities
Mar 16, 2026
ubuntu.com reports: USN-8095-1: Linux kernel vulnerabilities
Mar 16, 2026
ubuntu.com reports: USN-8095-2: Linux kernel (FIPS) vulnerabilities
Mar 17, 2026
ubuntu.com reports: USN-8095-3: Linux kernel (Real-time) vulnerabilities
Mar 23, 2026
ubuntu.com reports: USN-8095-4: Linux kernel (AWS) vulnerabilities
Mar 25, 2026
ubuntu.com reports: USN-8125-1: Linux kernel (Azure) vulnerabilities
Mar 25, 2026
ubuntu.com reports: USN-8126-1: Linux kernel (Azure) vulnerabilities
Apr 1, 2026
ubuntu.com reports: USN-8095-5: Linux kernel (Raspberry Pi) vulnerabilities
Apr 9, 2026
ubuntu.com reports: USN-8165-1: Linux kernel (Azure FIPS) vulnerabilities
May 7, 2026
ubuntu.com reports: USN-8261-1: Linux kernel (Xilinx) vulnerabilities
Public PoC (1)
github.com/byteReaper77/CVE-2025-39866
Unverified third-party code — review before executing.