CVE-2025-9912

MEDIUM

Nokia SR Linux < 23.10.8, < 24.10.6, < 25.7.2 - Local Privilege Escalation

Title source: manual

Description

Nokia SR Linux is vulnerable to a local privilege escalation vulnerability. Successful exploitation of this vulnerability may allow an authenticated user to execute arbitrary commands with superuser privilege.

References (1)

Core 1

Core References

Nokia Product Security Advisory

https://www.nokia.com/we-are-nokia/security/product-security-advisory/cve-2025-9912/

Scores

CVSS v3 6.3

EPSS 0.0011

EPSS Percentile 1.5%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-269

Status published

Products (6)

Nokia/Nokia SR Linux 23.10.8

Nokia/Nokia SR Linux 24.10.6

Nokia/Nokia SR Linux 25.7.2

Nokia/Nokia SR Linux < 23.10.8

Nokia/Nokia SR Linux < 24.10.6

Nokia/Nokia SR Linux < 25.7.2

Published Jun 16, 2026

Tracked Since Jun 16, 2026