PT-2025-41370 · Linux+1 · Linux Kernel+1

Published 2025-10-09 · Updated 2025-10-09 · CVE-2025-39959

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description An issue was identified in the Linux kernel related to the AMD ACP I2S driver, specifically concerning the incorrect retrieval of acp chip info. The original implementation used dev get platdata(dev) which did not consistently update all members of the acp chip info structure. This could lead to null pointer dereferences in various functions. The fix involves using dev get drvdata(dev->parent) to correctly obtain the acp chip info members, ensuring consistent data access and preventing potential null pointer issues. This correction addresses a problem missed in a previous commit that only addressed a specific function, set tdm slot().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2025-39959

Affected Products

Amd Acp I2S

Linux Kernel

References · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39959.json · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-39959 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-39959 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39959 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-39959 · Vendor Advisory
• https://git.kernel.org/stable/c/65c5cfbd6d938f77a0df3c34855a4f7d8a61fd10 · Patch
• https://cve.org/CVERecord?id=CVE-2025-39959 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-39959 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-39959 · Security Note
• https://git.kernel.org/stable/c/d7871f400cad1da376f1d7724209a1c49226c456 · Patch
• https://twitter.com/CVEnew/status/1976230451099341047 · Twitter Post
• https://t.me/CVEtracker/34517 · Telegram Post
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://twitter.com/VulmonFeeds/status/1976238656265371928 · Twitter Post