CVE-2025-39934CWE-476

CVE-2025-39934

Medium · published October 4, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
3.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ

If the interrupt occurs before resource initialization is complete, the

interrupt handler/worker may access uninitialized data such as the I2C

tcpc_client device, potentially leading to NULL pointer dereference.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00145 · 3.5th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2025-10-04T12:15Z
Affected products (11)
ProductVersionsFixed in
linux/linux_kernel≥ 5.11, < 5.15.1945.15.194
linux/linux_kernel≥ 5.16, < 6.1.1546.1.154
linux/linux_kernel≥ 6.2, < 6.6.1086.6.108
linux/linux_kernel≥ 6.7, < 6.12.496.12.49
linux/linux_kernel≥ 6.13, < 6.16.96.16.9
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (6)
https://git.kernel.org/stable/c/0da73f7827691a5e2265b110d5fe12f29535ec92 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/15a77e1ab0a994d69b471c76b8d01117128dda26 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/1a7ea294d57fb61485d11b3f2241d631d73025cb · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/51a501e990a353a4f15da6bab295b28e5d118f64 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/a10f910c77f280327b481e77eab909934ec508f0 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/f9a089d0a6d537d0f2061c8a37a7de535ce0310e · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 04 OCT 07:30Z
    drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ
    cvelistv5