CVE-2025-39899 | Linux Kernel up to 6.12.45/6.16.5 userfaultfd move_pages_pte privilege escalation

October 1, 2025 Yanac

A vulnerability marked as critical has been reported in Linux Kernel up to 6.12.45/6.16.5. Impacted is the function move_pages_pte of the component userfaultfd. Performing manipulation results in privilege escalation.

This vulnerability was named CVE-2025-39899. The attack needs to be approached within the local network. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More