PT-2025-37243 · Linux+1 · Linux Kernel+1

Published 2025-09-11 · Updated 2025-11-25 · CVE-2025-39786

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The Linux kernel contains an issue in the ad7173 driver related to the index used to access the channel when accessing the syscalib mode attribute. The driver uses a 0-based index to access the channel in the ad7173 channels array. However, the channels field may not match the address field depending on the channel configuration specified in the device tree, potentially resulting in an out-of-bounds access.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2025-39786

Affected Products

Astra Linux

Linux Kernel

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39786.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-39786 · Vendor Advisory
• https://git.kernel.org/stable/c/0eb8d7b25397330beab8ee62c681975b79f37223 · Patch
• https://osv.dev/vulnerability/CVE-2025-39786 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-39786 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2025-39786 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-39786 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-39786 · Security Note
• https://ubuntu.com/security/CVE-2025-39786 · Vendor Advisory
• https://git.kernel.org/stable/c/2def1a8691eb43654da0ae0d2fdb3722e20262a5 · Patch
• https://twitter.com/VulmonFeeds/status/1966260204669980929 · Twitter Post
• https://twitter.com/CVEnew/status/1966191550964310137 · Twitter Post
• https://git.kernel.org/linus/0eb8d7b25397330beab8ee62c681975b79f37223 · Note
• https://t.me/cveNotify/143994 · Telegram Post
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note