PT-2025-36293 · Linux+1 · Linux Kernel+1

CVE-2025-39699

·

Publicado

2025-08-20

·

Atualizado

2025-11-25

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The riscv iommu pte fetch() function can return a NULL value for unmapped or never-mapped IOVAs. The riscv iommu iova to phys() function did not handle these NULL returns, leading to a potential null pointer dereference. The issue has been resolved by preventing the null pointer dereference and removing pte validation.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

BDU:2026-03098
CVE-2025-39699

Produtos afetados

Astra Linux
Linux Kernel