CVE-2025-39934

MEDIUM

Linux kernel - Null Pointer Dereference

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ If the interrupt occurs before resource initialization is complete, the interrupt handler/worker may access uninitialized data such as the I2C tcpc_client device, potentially leading to NULL pointer dereference.

References (6)

[Patch] https://git.kernel.org/stable/c/0da73f7827691a5e2265b110d5fe12f29535ec92

[Patch] https://git.kernel.org/stable/c/15a77e1ab0a994d69b471c76b8d01117128dda26

[Patch] https://git.kernel.org/stable/c/1a7ea294d57fb61485d11b3f2241d631d73025cb

[Patch] https://git.kernel.org/stable/c/51a501e990a353a4f15da6bab295b28e5d118f64

[Patch] https://git.kernel.org/stable/c/a10f910c77f280327b481e77eab909934ec508f0

[Patch] https://git.kernel.org/stable/c/f9a089d0a6d537d0f2061c8a37a7de535ce0310e

Scores

CVSS v3 5.5

EPSS 0.0001

EPSS Percentile 3.0%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Classification

CWE

CWE-476

Status published

Affected Products (12)

linux/linux_kernel < 5.15.194

linux/linux_kernel

linux/linux_kernel

linux/linux_kernel

linux/linux_kernel

linux/linux_kernel

linux/linux_kernel

linux/Kernel < 5.15.194linux

linux/Kernel < 6.1.154linux

linux/Kernel < 6.6.108linux

linux/Kernel < 6.12.49linux

linux/Kernel < 6.16.9linux

Timeline

Published Oct 04, 2025

Tracked Since Feb 18, 2026