PT-2025-36310 · Linux+3 · Linux Kernel+3

Published

2025-01-01

·

Updated

2026-04-20

·

CVE-2025-39716

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The Linux kernel contains a flaw in the get user() function related to user read access. Due to the implementation of read access support, read access interruptions are not triggered at privilege level 0, allowing user code to potentially access read-protected addresses via system calls. The issue is resolved by probing read access rights at privilege level 3 and setting gu err to -EFAULT if access is not allowed. The cmpiclr instruction performs a 32-bit compare.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-697

Related Identifiers

AZL-67013
AZL-73662
BDU:2025-15544
CVE-2025-39716
DLA-4328-1
DSA-6008-1
DSA-6009-1
ECHO-8AA4-95F4-9F61
MGASA-2025-0234
MGASA-2025-0235
USN-8028-1
USN-8028-2
USN-8028-3
USN-8028-4
USN-8028-5
USN-8028-6
USN-8028-7
USN-8028-8
USN-8031-1
USN-8031-2
USN-8031-3
USN-8052-1
USN-8052-2
USN-8074-1
USN-8074-2
USN-8126-1

Affected Products

Debian
Linuxmint
Linux Kernel
Ubuntu