Go to homepageCyberStrike

Menu

Star on GitHub · 3.2k
Sign inDownload

CVE-2025-39880

9.8 · CRITICAL

In the Linux kernel, the following vulnerability has been resolved: libceph: fix invalid accesses to ceph_connection_v1_info There is a place where generic code in messenger.c is reading and anot…

Published Sep 23, 2025CWE-704EPSS 0.33%

Overview

CVE-2025-39880 is a critical-severity vulnerability. It was published on September 23, 2025 and has a CVSS 3.1 base score of 9.8 (CRITICAL).

This vulnerability has a CVSS 3.1 base score of 9.8, rated CRITICAL. It can be exploited remotely over the network. No authentication or special privileges are required for exploitation.

Technical description

In the Linux kernel, the following vulnerability has been resolved:

libceph: fix invalid accesses to ceph_connection_v1_info

There is a place where generic code in messenger.c is reading and

another place where it is writing to con->v1 union member without

checking that the union member is active (i.e. msgr1 is in use).

On 64-bit systems, con->v1.auth_retry overlaps with con->v2.out_iter,

so such a read is almost guaranteed to return a bogus value instead of

0 when msgr2 is in use. This ends up being fairly benign because the

side effect is just the invalidation of the authorizer and successive

fetching of new tickets.

con->v1.connect_seq overlaps with con->v2.conn_bufs and the fact that

it's being written to can cause more serious consequences, but luckily

it's not something that happens often.

Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

References

Refgit.kernel.org/stable/c/23538cfbeed87159a5ac6c61e7a6de3d8d4486a8Refgit.kernel.org/stable/c/35dbbc3dbf8bccb2d77c68444f42c1e6d2d27983Refgit.kernel.org/stable/c/591ea9c30737663a471b2bb07b27ddde86b020d5Refgit.kernel.org/stable/c/6bd8b56899be0b514945f639a89ccafb8f8dfaefRefgit.kernel.org/stable/c/cdbc9836c7afadad68f374791738f118263c5371Refgit.kernel.org/stable/c/ea12ab684f8ae8a6da11a22c78d94a79e2163096Reflists.debian.org/debian-lts-announce/2025/10/msg00008.html

How CyberStrike helps

Frequently asked questions

What is CVE-2025-39880?

CVE-2025-39880 is a critical-severity vulnerability. It was published on September 23, 2025 and has a CVSS 3.1 base score of 9.8 (CRITICAL).

How severe is CVE-2025-39880?

This vulnerability has a CVSS 3.1 base score of 9.8, rated CRITICAL. It can be exploited remotely over the network. No authentication or special privileges are required for exploitation.

How do I fix or remediate CVE-2025-39880?

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

How can CyberStrike help with CVE-2025-39880?

CyberStrike is an open-source, AI-augmented pentesting engine. Rather than flag a version number, it tests whether an issue like CVE-2025-39880 is actually reachable in your own applications and APIs, then verifies each finding before reporting it. That tells you if the weakness is a real, exploitable risk in your environment or a false positive you can safely deprioritize.

Related CRITICAL CVEs from 2025

View all
Browse by year2026202520242023202220212020201920182017201620152014201320122011201020092008200720062005200420032002200120001999