CVE-2025-39934 Details
Description
In the Linux kernel, the following vulnerability has been resolved: drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ If the interrupt occurs before resource initialization is complete, the interrupt handler/worker may access uninitialized data such as the I2C tcpc_client device, potentially leading to NULL pointer dereference.
A NULL pointer dereference vulnerability has been identified in the Linux kernel's DRM bridge component, specifically within the ANX7625 driver. This issue arises when an interrupt occurs before the necessary resource initialization is completed. In such cases, the interrupt handler may attempt to access uninitialized data, including the I2C tcpc_client device. This uninitialized access can lead to a NULL pointer dereference, causing potential instability or crashes in the system.
Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability. The specific commits that fix this issue can be downloaded as part of the Linux kernel source.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/0da73f7827691a5e2265b110d5fe12f29535ec92 | kernel.org | Patch |
| https://git.kernel.org/stable/c/15a77e1ab0a994d69b471c76b8d01117128dda26 | kernel.org | Patch |
| https://git.kernel.org/stable/c/1a7ea294d57fb61485d11b3f2241d631d73025cb | kernel.org | Patch |
| https://git.kernel.org/stable/c/51a501e990a353a4f15da6bab295b28e5d118f64 | kernel.org | Patch |
| https://git.kernel.org/stable/c/a10f910c77f280327b481e77eab909934ec508f0 | kernel.org | Patch |
| https://git.kernel.org/stable/c/f9a089d0a6d537d0f2061c8a37a7de535ce0310e | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-476 | NULL Pointer Dereference | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 5.11, < 5.15.194 >= 5.16, < 6.1.154 >= 6.2, < 6.6.108 >= 6.7, < 6.12.49 >= 6.13, < 6.16.9 6.17 rc1 6.17 rc2 6.17 rc3 6.17 rc4 6.17 rc5 6.17 rc6 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Jan 23, 2026 | Initial Analysis | [email protected] |
| Oct 4, 2025 | New CVE Received | kernel.org |