CVEvulnerability

CVE-2025-39694

5.5 MEDIUM Published 2025-09-05 Modified 2026-10-19 Official page ↗
Status
Modified
Published
2025-09-05
Last modified
2026-10-19
Assigner
416baaa9-dc9f-4396-8d5f-8c081fb06d67
CVSS 3.1 (416baaa9-dc9f-4396-8d5f-8c081fb06d67)
7.3 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Fix SCCB present check Tracing code called by the SCLP interrupt handler contains early exits if the SCCB address associated with an interrupt is NULL. This check is performed after physical to virtual address translation. If the kernel identity mapping does not start at address zero, the resulting virtual address is never zero, so that the NULL checks won't work. Subsequently this may result in incorrect accesses to the first page of the identity mapping. Fix this by introducing a function that handles the NULL case before address translation.

Affected configurations

• linux linux kernel (>= 5.16 < 6.1.149) • linux linux kernel (>= 6.2 < 6.6.103) • linux linux kernel (>= 6.7 < 6.12.44) • linux linux kernel (>= 6.13 < 6.16.4) • linux linux kernel 6.17 • debian debian linux 11.0

Related

Weakness · CWE (1)

  • CWE-476 NULL Pointer Dereference weakness

References