CVEvulnerability
CVE-2025-39934
5.5 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2025-10-04
- Last modified
- 2026-10-19
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-476
Description
In the Linux kernel, the following vulnerability has been resolved:
drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ
If the interrupt occurs before resource initialization is complete, the
interrupt handler/worker may access uninitialized data such as the I2C
tcpc_client device, potentially leading to NULL pointer dereference.
Affected configurations
• linux linux kernel (>= 5.11 < 5.15.194)
• linux linux kernel (>= 5.16 < 6.1.154)
• linux linux kernel (>= 6.2 < 6.6.108)
• linux linux kernel (>= 6.7 < 6.12.49)
• linux linux kernel (>= 6.13 < 6.16.9)
• linux linux kernel 6.17
Related
Weakness · CWE (1)
- CWE-476 NULL Pointer Dereference weakness
References
- https://git.kernel.org/stable/c/0da73f7827691a5e2265b110d5fe12f29535ec92 Patch
- https://git.kernel.org/stable/c/15a77e1ab0a994d69b471c76b8d01117128dda26 Patch
- https://git.kernel.org/stable/c/1a7ea294d57fb61485d11b3f2241d631d73025cb Patch
- https://git.kernel.org/stable/c/51a501e990a353a4f15da6bab295b28e5d118f64 Patch
- https://git.kernel.org/stable/c/a10f910c77f280327b481e77eab909934ec508f0 Patch
- https://git.kernel.org/stable/c/f9a089d0a6d537d0f2061c8a37a7de535ce0310e Patch