CVE-2025-9912: Nokia Sr Linux

Medium severity, CVSS 6.3. EPSS: 0.1% chance of exploitation in the next 30 days.

Nokia SR Linux is vulnerable to a local privilege escalation vulnerability. Successful exploitation of this vulnerability may allow an authenticated user to execute arbitrary commands with superuser privilege.

Affected products

• Nokia Nokia Sr Linux: before 23.10.8 (fixed in 23.10.8); before 24.10.6 (fixed in 24.10.6); before 25.7.2 (fixed in 25.7.2)

Published 2026-06-16. Last modified 2026-10-07.