CVE-2025-39755

MEDIUM

Linux Kernel 6.13-6.13.10, 6.14-6.14.1, and 6.15 - NULL Pointer Dereference in PCMCIA Driver Registration

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: staging: gpib: Fix cb7210 pcmcia Oops The pcmcia_driver struct was still only using the old .name initialization in the drv field. This led to a NULL pointer deref Oops in strcmp called from pcmcia_register_driver. Initialize the pcmcia_driver struct name field.

References (3)

Core 3

Core References

Patch

https://git.kernel.org/stable/c/7ec50077d7f6647cb6ba3a2a20a6c26f51259c7d

Patch

https://git.kernel.org/stable/c/c82ae06f49e70d1c14ee9c76c392345856d050c9

Patch

https://git.kernel.org/stable/c/c1baf6528bcfd6a86842093ff3f8ff8caf309c12

Scores

CVSS v3 5.5

EPSS 0.0019

EPSS Percentile 9.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-476

Status published

Products (11)

linux/Kernel 6.13.0 - 6.13.11linux

linux/Kernel 6.14.0 - 6.14.2linux

Linux/Linux < 6.13

Linux/Linux 6.13

Linux/Linux 6.13.11 - 6.13.*

Linux/Linux 6.14.2 - 6.14.*

Linux/Linux 6.15

Linux/Linux e9dc69956d4d9bf4a81d35995ce9229ff5e4cad5 - 7ec50077d7f6647cb6ba3a2a20a6c26f51259c7d

Linux/Linux e9dc69956d4d9bf4a81d35995ce9229ff5e4cad5 - c1baf6528bcfd6a86842093ff3f8ff8caf309c12

Linux/Linux e9dc69956d4d9bf4a81d35995ce9229ff5e4cad5 - c82ae06f49e70d1c14ee9c76c392345856d050c9

... and 1 more

Published Apr 18, 2025

Tracked Since Feb 18, 2026