CVE-2025-39702

Updated: 2026-02-08 02:04:40.004704

Description:

In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x 0.0
CVSS Version 3.x HIGH 7.0

Status

OS name Project name Version Score Severity Status Errata Last updated

Statement

AlmaLinux 9.2 ESU kernel 5.14.0 7.0 HIGH Released CLSA-2025:1764151168 2025-11-27 10:25:22
CentOS 8.4 ELS kernel 4.18.0 7.0 HIGH Not Vulnerable 2026-01-12 17:44:41
CentOS 8.5 ELS kernel 4.18.0 7.0 HIGH Not Vulnerable 2026-01-12 17:44:41
CentOS Stream 8 ELS kernel 4.18.0 7.0 HIGH Not Vulnerable 2026-01-12 17:44:40
Oracle Linux 7 ELS kernel-uek 5.4.17 7.0 HIGH Not Vulnerable 2026-01-12 17:44:54
TuxCare 9.6 ESU kernel 5.14.0 7.0 HIGH Already Fixed 2025-12-11 05:30:11
Ubuntu 16.04 ELS linux-hwe 4.15.0 7.0 HIGH Needs Triage 2026-01-10 06:19:41
Ubuntu 18.04 ELS linux 4.15.0 7.0 HIGH Needs Triage 2026-01-10 06:31:07
Ubuntu 20.04 ELS linux 5.4.0 7.0 HIGH In Testing 2026-02-05 13:17:53