Answer in brief
CVE-2025-39702 records a Unknown severity vulnerability in ipv6: sr: Fix MAC comparison to be constant-time. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC CN 4100 (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC CN 4100 (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=bf355b8d2c30a289232042cacc1cfaea4923936c <ff55a452d56490047f5233cc48c5d933f8586884 || >=bf355b8d2c30a289232042cacc1cfaea4923936c <3b348c9c8d2ca2c67559ffd0e258ae7e1107d4f0 || >=bf355b8d2c30a289232042cacc1cfaea4923936c <86b6d34717fe0570afce07ee79b8eeb40341f831 || >=bf355b8d2c30a289232042cacc1cfaea4923936c <3ddd55cf19ed6cc62def5e3af10c2a9df1b861c3 || >=bf355b8d2c30a289232042cacc1cfaea4923936c <b3967c493799e63f648e9c7b6cb063aa2aed04e7 || >=bf355b8d2c30a289232042cacc1cfaea4923936c <f7878d47560d61e3f370aca3cebb8f42a55b990a || >=bf355b8d2c30a289232042cacc1cfaea4923936c <a458b2902115b26a25d67393b12ddd57d1216aaa | ff55a452d56490047f5233cc48c5d933f8586884, 3b348c9c8d2ca2c67559ffd0e258ae7e1107d4f0, 86b6d34717fe0570afce07ee79b8eeb40341f831, 3ddd55cf19ed6cc62def5e3af10c2a9df1b861c3, b3967c493799e63f648e9c7b6cb063aa2aed04e7, f7878d47560d61e3f370aca3cebb8f42a55b990a, a458b2902115b26a25d67393b12ddd57d1216aaa |
| Linux/Linuxgeneric | 4.10 | Not reported |
| Siemens/SIMATIC CN 4100generic | >=0 <V5.0 | V5.0 |
Published upstream
Sep 5, 2025
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this.
Quoted source text, attributed separately from HOL analysis.