PT-2025-36288 · Linux +1 · Linux Kernel +1

Published 2025-01-01 · Updated 2025-09-06 · CVE-2025-39694

Positive Technologies · (AI Summary)

Name of the Vulnerable Software and Affected Versions:

Linux kernel (affected versions not specified)

Description:

The Linux kernel contains a flaw in the tracing code called by the SCLP interrupt handler. Early exits occur if the SCCB address associated with an interrupt is NULL, after physical to virtual address translation. If the kernel identity mapping does not start at address zero, the resulting virtual address is never zero, causing the NULL checks to fail and potentially leading to incorrect accesses to the first page of the identity mapping.

Recommendations:

At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2025-39694

Affected Products

Debian

Linux Kernel

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2025-39694 · Security Note
• https://security-tracker.debian.org/tracker/source-package/linux · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-39694 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2025-39694 · Vendor Advisory
• https://git.kernel.org/stable/c/61605c847599fbfdfafe638607841c7d73719081 · Note
• https://git.kernel.org/stable/c/aa5073ac1a2a274812f3b04c278992e68ff67cc7 · Note
• https://twitter.com/CVEnew/status/1964195461054775683 · Twitter Post
• https://git.kernel.org/stable/c/bf83ae3537359af088d6577812ed93113dfbcb7b · Note
• https://packages.debian.org/src:linux · Note
• https://git.kernel.org/stable/c/86c2825791c3836a8f77a954b9c5ebe6fab410c5 · Note
• https://git.kernel.org/stable/c/430fa71027b6ac9bb0ce5532b8d0676777d4219a · Note