PT-2025-36410 · Linux+1 · Linux Kernel+1

Published 2025-05-28 · Updated 2025-09-07 · CVE-2025-39729

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains an issue where an uninitialized error pointer is dereferenced within the crypto/ccp module. This issue was identified and addressed by fixing smatch warnings in the sev platform init locked() function located in drivers/crypto/ccp/sev-dev.c.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Access of Uninitialized Pointer

Weakness Enumeration

CWE-824

Related Identifiers

BDU:2026-03094

CVE-2025-39729

Affected Products

Astra Linux

Linux Kernel

References · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39729.json · Exploit
• https://git.kernel.org/stable/c/841634e1fdc2bdf35ab851fc279fd3bedcdf5e93 · Patch
• https://ubuntu.com/security/CVE-2025-39729 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-39729 · Security Note
• https://cve.org/CVERecord?id=CVE-2025-39729 · Security Note
• https://git.kernel.org/stable/c/0fa766726c091ff0ec7d26874f6e4724d23ecb0e · Patch
• https://osv.dev/vulnerability/CVE-2025-39729 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-39729 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03094 · Security Note
• https://t.me/CVEtracker/31912 · Telegram Post
• https://twitter.com/CVEnew/status/1964712359198421456 · Twitter Post
• https://git.kernel.org/linus/0fa766726c091ff0ec7d26874f6e4724d23ecb0e · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://lore.kernel.org/linux-cve-announce/2025090730-CVE-2025-39729-14c4@gregkh · Note