CVE-2025-39699
BaseFortify
Publication date: 2025-09-05
Last updated on: 2025-11-25
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | From 5.15.160 (inc) to 5.16 (inc) |
| linux | linux_kernel | 6.17 |
| linux | linux_kernel | 6.17 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-476 | The product dereferences a pointer that it expects to be valid but is NULL. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a NULL pointer dereference in the Linux kernel's riscv_iommu_iova_to_phys() function. The function riscv_iommu_pte_fetch() can return NULL for unmapped or never-mapped I/O virtual addresses (iova), but riscv_iommu_iova_to_phys() did not properly handle these NULL returns, leading to a potential NULL pointer dereference. The fix prevents this by properly handling NULL pointers and removing unnecessary validation.
How can this vulnerability impact me? :
A NULL pointer dereference in kernel code can cause system crashes or instability, potentially leading to denial of service. If exploited, it could disrupt normal system operations on affected Linux systems using the RISC-V IOMMU implementation.