PT-2025-41374 · Linux+1 · Linux Kernel+1

Published 2025-10-09 · Updated 2026-02-03 · CVE-2025-39960

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Linux kernel related to the initialization of the acpi gpio info structure within the gpiolib ACPI subsystem. Specifically, after commit 7c010d463372, the acpi gpio info struct was being passed to the acpi find gpio() function without proper initialization. This resulted in the info->quirks field being used in acpi populate gpio lookup, leading to errors. The i2c hid cpi driver was observed to be affected, resulting in probe failures with an error message indicating a missing Int IRQ.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2025-39960

Affected Products

Linux Kernel

I2C Hid Cpi

References · 16

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39960.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-39960 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-39960 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-39960 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-39960 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-39960 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39960 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-39960 · Vendor Advisory
• https://git.kernel.org/stable/c/27d94a2a52cbb54927c0140bd5b978c56e9a283a · Patch
• https://git.kernel.org/stable/c/19c839a98c731169f06d32e7c9e00c78a0086ebe · Patch
• https://twitter.com/CVEnew/status/1976263811704209856 · Twitter Post
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://t.me/CVEtracker/34518 · Telegram Post
• https://t.me/cveNotify/150730 · Telegram Post
• https://git.kernel.org/linus/19c839a98c731169f06d32e7c9e00c78a0086ebe · Note