EUVD-2025-34586

🗓️ 15 Oct 2025 09:30:17Reported by EUVDType

Fix by populating net_device_ops->ndo_change_mtu() to enforce CAN_MTU and block PF_PACKET CAN XL overflow.

Reporter	Title	Published	Views	Family All 193
AstraLinux	Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12	13 Jan 202614:01	–	astralinux
Circl	CVE-2025-39986	15 Oct 202509:08	–	circl
CNNVD	Linux kernel 安全漏洞	15 Oct 202500:00	–	cnnvd
CVE	CVE-2025-39986	15 Oct 202507:56	–	cve
Cvelist	CVE-2025-39986 can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow	15 Oct 202507:56	–	cvelist
Debian	[SECURITY] [DLA 4379-1] linux-6.1 security update	25 Nov 202517:19	–	debian
Debian	[SECURITY] [DLA 4404-1] linux security update	12 Dec 202513:38	–	debian
Debian	[SECURITY] [DSA 6053-1] linux security update	11 Nov 202520:11	–	debian
Debian CVE	CVE-2025-39986	15 Oct 202507:56	–	debiancve
Tenable Nessus	Debian dla-4379 : linux-config-6.1 - security update	25 Nov 202500:00	–	nessus

[
  {
    "enisaIdVendor": [
      {
        "id": "63193100-b4f3-367c-b20a-21b6b2de7f65",
        "vendor": {
          "name": "Linux"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "09f1d9b2-b50e-3e97-98b2-2e50f7112444",
        "product": {
          "name": "Linux"
        },
        "product_version": "patch: 5.10.245"
      },
      {
        "id": "149bed76-a435-3ded-a282-3cc4d99bed59",
        "product": {
          "name": "Linux"
        },
        "product_version": "0738eff14d817a02ab082c392c96a1613006f158 <61da0bd4102c459823fbe6b8b43b01fb6ace4a22"
      },
      {
        "id": "32b27763-cf82-3c86-8812-03b03d799b76",
        "product": {
          "name": "Linux"
        },
        "product_version": "0738eff14d817a02ab082c392c96a1613006f158 <de77841652e57afbc46e9e1dbf51ee364fc008e1"
      },
      {
        "id": "5867117a-ded5-3740-b42a-0fac5dfdcaaf",
        "product": {
          "name": "Linux"
        },
        "product_version": "patch: 6.17"
      },
      {
        "id": "58820a5c-c8ee-3533-9fe0-0fdb203e2cc5",
        "product": {
          "name": "Linux"
        },
        "product_version": "0738eff14d817a02ab082c392c96a1613006f158 <7f7b21026a6febdb749f6f6f950427245aa86cce"
      },
      {
        "id": "7b202f57-13fa-3930-a073-257302f9bfe4",
        "product": {
          "name": "Linux"
        },
        "product_version": "4.4"
      },
      {
        "id": "8c1f5aa6-144c-34ed-8c2c-1e16f6fd3759",
        "product": {
          "name": "Linux"
        },
        "product_version": "0738eff14d817a02ab082c392c96a1613006f158 <063539db42203b29d5aa2adf0cae3d68c646a6b6"
      },
      {
        "id": "a593522e-c3bd-3c98-a1d4-80766d3d85be",
        "product": {
          "name": "Linux"
        },
        "product_version": "patch: 6.16.10"
      },
      {
        "id": "a7f0e8b9-5d53-366c-9926-56ab17255119",
        "product": {
          "name": "Linux"
        },
        "product_version": "0738eff14d817a02ab082c392c96a1613006f158 <a61ff7ac93270d20ca426c027d6d01c8ac8e904c"
      },
      {
        "id": "ac3e5e66-311c-3528-bcd7-9bc1f8df85e2",
        "product": {
          "name": "Linux"
        },
        "product_version": "patch: 0"
      },
      {
        "id": "c2416a84-06c8-3984-bb2c-f00d45cab9eb",
        "product": {
          "name": "Linux"
        },
        "product_version": "0738eff14d817a02ab082c392c96a1613006f158 <2e423e1990f3972cbea779883fef52c2f2acb858"
      },
      {
        "id": "c4e9b450-754e-3c4d-862f-de417525978b",
        "product": {
          "name": "Linux"
        },
        "product_version": "patch: 5.4.300"
      },
      {
        "id": "cd37b31e-66a5-32a9-a830-e397fd17453d",
        "product": {
          "name": "Linux"
        },
        "product_version": "0738eff14d817a02ab082c392c96a1613006f158 <4f382cc887adca8478b9d3e6b81aa6698a95fff4"
      },
      {
        "id": "cf76c59a-177b-31d4-a36f-83d03ee2ea4f",
        "product": {
          "name": "Linux"
        },
        "product_version": "0738eff14d817a02ab082c392c96a1613006f158 <60463a1c138900494cb3adae41142a11cd8feb3c"
      },
      {
        "id": "d1ceb1c1-76e9-30dd-8f4f-07d25f13050d",
        "product": {
          "name": "Linux"
        },
        "product_version": "patch: 6.1.155"
      },
      {
        "id": "d94a325a-a592-3d41-8423-d447e19843fe",
        "product": {
          "name": "Linux"
        },
        "product_version": "patch: 6.6.109"
      },
      {
        "id": "f00b0853-9481-3257-b0d0-d156d934a469",
        "product": {
          "name": "Linux"
        },
        "product_version": "patch: 6.12.50"
      },
      {
        "id": "f1e78517-3ca2-3c59-a40a-a808c5151f92",
        "product": {
          "name": "Linux"
        },
        "product_version": "patch: 5.15.194"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/063539db42203b29d5aa2adf0cae3d68c646a6b6
git	www.git.kernel.org/stable/c/4f382cc887adca8478b9d3e6b81aa6698a95fff4
git	www.git.kernel.org/stable/c/60463a1c138900494cb3adae41142a11cd8feb3c
git	www.git.kernel.org/stable/c/a61ff7ac93270d20ca426c027d6d01c8ac8e904c
git	www.git.kernel.org/stable/c/2e423e1990f3972cbea779883fef52c2f2acb858
git	www.git.kernel.org/stable/c/de77841652e57afbc46e9e1dbf51ee364fc008e1
git	www.git.kernel.org/stable/c/7f7b21026a6febdb749f6f6f950427245aa86cce
git	www.git.kernel.org/stable/c/61da0bd4102c459823fbe6b8b43b01fb6ace4a22
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-39986

15 Oct 2025 09:30Current

6.5Medium risk

Vulners AI Score6.5

EPSS0.00077