CVE-2025-39701

In the Linux kernel, the following vulnerability has been resolved: ACPI: pfr_update: Fix the driver update version check The security-version-number check should be used rather than the runtime version check for driver updates. Otherwise, the firmware update would fail when the update binary had a lower runtime version number than the current one. [ rjw: Changelog edits ]
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.17:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.17:rc2:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

History

08 Jan 2026, 16:04

Type Values Removed Values Added
CWE NVD-CWE-noinfo
First Time Linux
Debian
Debian debian Linux
Linux linux Kernel
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.8
CPE cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.17:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.17:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/79300ff532bccbbf654992c7c0863b49a6c3973c - () https://git.kernel.org/stable/c/79300ff532bccbbf654992c7c0863b49a6c3973c - Patch
References () https://git.kernel.org/stable/c/8151320c747efb22d30b035af989fed0d502176e - () https://git.kernel.org/stable/c/8151320c747efb22d30b035af989fed0d502176e - Patch
References () https://git.kernel.org/stable/c/908094681f645d3a78e18ef90561a97029e2df7b - () https://git.kernel.org/stable/c/908094681f645d3a78e18ef90561a97029e2df7b - Patch
References () https://git.kernel.org/stable/c/b00219888c11519ef75d988fa8a780da68ff568e - () https://git.kernel.org/stable/c/b00219888c11519ef75d988fa8a780da68ff568e - Patch
References () https://git.kernel.org/stable/c/cf0a88124e357bffda487cbf3cb612bb97eb97e4 - () https://git.kernel.org/stable/c/cf0a88124e357bffda487cbf3cb612bb97eb97e4 - Patch
References () https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html - () https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html - Third Party Advisory, Mailing List

03 Nov 2025, 18:16

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html -

05 Sep 2025, 18:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-09-05 18:15

Updated : 2026-01-08 16:04


NVD link : CVE-2025-39701

Mitre link : CVE-2025-39701

CVE.ORG link : CVE-2025-39701


JSON object : View

Products Affected

debian

  • debian_linux

linux

  • linux_kernel