Linux kernel 安全漏洞

🗓️ 24 Sep 2025 00:00:00Reported by China National Vulnerability Database of Information SecurityType

cnnvd

cnnvd🔗 www.cnnvd.org.cn👁 1 Views

Linux kernel vulnerability fails to validate key size, risking bypass of 16-byte key for Security Mode Four.

Reporter	Title	Published	Views	Family All 132
ATTACKERKB	CVE-2025-39889	24 Sep 202511:02	–	attackerkb
AstraLinux	Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12	16 Jun 202511:28	–	astralinux
BDU FSTEC	The vulnerability of the l2cap_connect() function in the net/bluetooth/l2cap_core.c module of the Linux kernel allows a hacker to disclose protected information.	10 Oct 202500:00	–	bdu_fstec
Circl	CVE-2025-39889	2 Apr 202611:20	–	circl
CVE	CVE-2025-39889	24 Sep 202511:02	–	cve
Cvelist	CVE-2025-39889 Bluetooth: l2cap: Check encryption key size on incoming connection	24 Sep 202511:02	–	cvelist
Debian CVE	CVE-2025-39889	24 Sep 202511:02	–	debiancve
EUVD	EUVD-2025-30958	3 Oct 202520:07	–	euvd
NVD	CVE-2025-39889	24 Sep 202511:15	–	nvd
Tenable Nessus	openSUSE 16 Security Update : kernel (openSUSE-SU-2025-20081-1)	2 Dec 202500:00	–	nessus

Source	Link
git	www.git.kernel.org/stable/c/d4ca2fd218caafbf50e3343ba1260c6a23b5676a
git	www.git.kernel.org/stable/c/522e9ed157e3c21b4dd623c79967f72c21e45b78
git	www.git.kernel.org/stable/c/c6d527bbd3d3896375079f5dbc8b7f96734a3ba5
git	www.git.kernel.org/stable/c/9e3114958d87ea88383cbbf38c89e04b8ea1bce5
git	www.git.kernel.org/stable/c/d49798ecd26e0ee7995a7fc1e90ca5cd9b4402d6
git	www.git.kernel.org/stable/c/24b2cdfc16e9bd6ab3d03b8e01c590755bd3141f
vigilance	www.vigilance.fr/vulnerability/Linux-kernel-three-vulnerabilities-dated-25-09-2025-48307

25 May 2026 00:00Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.15.5 - 8.1

EPSS0.00091

SSVC

Linux kernel key size validation sixteen byte key Security Mode Four Level Four