CVE-2025-39934

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-39934
In the Linux kernel, the following vulnerability has been resolved: drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ If the interrupt occurs before resource initialization is complete, the interrupt handler/worker may access uninitialized data such as the I2C tcpc_client device, potentially leading to NULL pointer dereference.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0da73f7827691a5e2265b110d5fe12f29535ec92 Patch
https://git.kernel.org/stable/c/15a77e1ab0a994d69b471c76b8d01117128dda26 Patch
https://git.kernel.org/stable/c/1a7ea294d57fb61485d11b3f2241d631d73025cb Patch
https://git.kernel.org/stable/c/51a501e990a353a4f15da6bab295b28e5d118f64 Patch
https://git.kernel.org/stable/c/a10f910c77f280327b481e77eab909934ec508f0 Patch
https://git.kernel.org/stable/c/f9a089d0a6d537d0f2061c8a37a7de535ce0310e Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.17:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.17:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.17:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.17:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.17:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.17:rc6:*:*:*:*:*:*
History

23 Jan 2026, 20:33

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:6.17:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.17:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.17:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.17:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.17:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.17:rc1:*:*:*:*:*:*
First Time Linux
Linux linux Kernel
CWE CWE-476
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/0da73f7827691a5e2265b110d5fe12f29535ec92 - () https://git.kernel.org/stable/c/0da73f7827691a5e2265b110d5fe12f29535ec92 - Patch
References () https://git.kernel.org/stable/c/15a77e1ab0a994d69b471c76b8d01117128dda26 - () https://git.kernel.org/stable/c/15a77e1ab0a994d69b471c76b8d01117128dda26 - Patch
References () https://git.kernel.org/stable/c/1a7ea294d57fb61485d11b3f2241d631d73025cb - () https://git.kernel.org/stable/c/1a7ea294d57fb61485d11b3f2241d631d73025cb - Patch
References () https://git.kernel.org/stable/c/51a501e990a353a4f15da6bab295b28e5d118f64 - () https://git.kernel.org/stable/c/51a501e990a353a4f15da6bab295b28e5d118f64 - Patch
References () https://git.kernel.org/stable/c/a10f910c77f280327b481e77eab909934ec508f0 - () https://git.kernel.org/stable/c/a10f910c77f280327b481e77eab909934ec508f0 - Patch
References () https://git.kernel.org/stable/c/f9a089d0a6d537d0f2061c8a37a7de535ce0310e - () https://git.kernel.org/stable/c/f9a089d0a6d537d0f2061c8a37a7de535ce0310e - Patch

04 Oct 2025, 08:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-10-04 08:15

Updated : 2026-01-23 20:33

NVD link : CVE-2025-39934

Mitre link : CVE-2025-39934

CVE.ORG link : CVE-2025-39934

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference