PT-2025-37200 · Linux+1 · Linux Kernel+1

Published 2025-09-11 · Updated 2025-09-12 · CVE-2025-39741

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A flaw exists in the Linux kernel’s drm/xe/migrate module related to handling copy sizes during migration. Specifically, when dealing with non-page aligned copies and pitches, the calculation of the number of bytes to copy can exceed the S16 MAX limit of the copy command, leading to an assertion failure. This issue occurs due to an incorrect accounting for the pitch when calculating the copy size.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2025-39741

Affected Products

Astra Linux

Linux Kernel

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39741.json · Exploit
• https://git.kernel.org/stable/c/4126cb327a2e3273c81fcef1c594c5b7b645c44c · Patch
• https://git.kernel.org/stable/c/7257cc6644d540130a46a61531a07a0517cace89 · Patch
• https://cve.org/CVERecord?id=CVE-2025-39741 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-39741 · Security Note
• https://osv.dev/vulnerability/CVE-2025-39741 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39741 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-39741 · Vendor Advisory
• https://git.kernel.org/linus/4126cb327a2e3273c81fcef1c594c5b7b645c44c · Note
• https://twitter.com/CVEnew/status/1966191596111802625 · Twitter Post
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note