CVE-2025-39934
Published: October 7, 2025Last modified: October 7, 2025
Description
In the Linux kernel, the following vulnerability has been resolved: drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ If the interrupt occurs before resource initialization is complete, the interrupt handler/worker may access uninitialized data such as the I2C tcpc_client device, potentially leading to NULL pointer dereference.
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score | 5.5 |
| Attack Vector | LOCAL |
| Attack complexity | LOW |
| Privileges required | LOW |
| User interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality | NONE |
| Integrity impact | NONE |
| Availability impact | HIGH |
| Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Status
| Product | Release | Package | Status |
|---|---|---|---|
| Alpaquita Linux | 23 LTS | linux-lts | Fixed (6.1.155-r0) |
| 25 LTS | linux-lts | Fixed (6.12.51-r0) | |
| Stream | linux-lts | Fixed (6.12.51-r0) |
References
- https://git.kernel.org/stable/c/0da73f7827691a5e2265b110d5fe12f29535ec92
- https://git.kernel.org/stable/c/15a77e1ab0a994d69b471c76b8d01117128dda26
- https://git.kernel.org/stable/c/1a7ea294d57fb61485d11b3f2241d631d73025cb
- https://git.kernel.org/stable/c/51a501e990a353a4f15da6bab295b28e5d118f64
- https://git.kernel.org/stable/c/a10f910c77f280327b481e77eab909934ec508f0
- https://git.kernel.org/stable/c/f9a089d0a6d537d0f2061c8a37a7de535ce0310e