PT-2025-41370 · Linux+1 · Linux Kernel+1

CVE-2025-39959

·

Publicado

2025-10-09

·

Atualizado

2025-10-10

CVSS v4.0

6.8

Média

VetorAV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)
Description An issue was identified in the Linux kernel related to the AMD ACP I2S driver, specifically concerning the incorrect retrieval of acp chip info. The original implementation used dev get platdata(dev) which did not consistently update all members of the acp chip info structure. This could lead to null pointer dereferences in various functions. The fix involves using dev get drvdata(dev->parent) to correctly obtain the acp chip info members, ensuring consistent data access and preventing potential null pointer issues. This correction addresses a problem missed in a previous commit that only addressed a specific function, set tdm slot().
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2025-39959

Produtos afetados

Amd Acp I2S
Linux Kernel