CVE-2025-39771
BaseFortify
Publication date: 2025-09-11
Last updated on: 2025-11-25
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | 6.17 |
| linux | linux_kernel | 6.17 |
| linux | linux_kernel | From 5.15.160 (inc) to 5.16 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-NVD-CWE-noinfo |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability occurs in the Linux kernel's regulator pca9450 module, where a notifier callback (pca9450_i2c_restart_handler) is registered multiple times, causing an error dump and kernel warning. The issue arises because the module does not properly manage the registration of the restart handler, leading to a kernel dump during module testing. The fix involves using devm_register_sys_off_handler to let the kernel handle resource freeing automatically, preventing the kernel dump.
How can this vulnerability impact me? :
This vulnerability can cause kernel warnings and error dumps, which may lead to system instability or crashes during the operation of the pca9450 regulator module. Such instability can affect system reliability and availability, potentially disrupting services or applications relying on the Linux kernel.
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by checking for the specific kernel error message related to the pca9450 regulator module. You can look for the following error in the kernel logs: 'notifier callback pca9450_i2c_restart_handler already registered'. Use the command 'dmesg | grep pca9450_i2c_restart_handler' or 'journalctl -k | grep pca9450_i2c_restart_handler' to find this error message in your system logs.
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, update the Linux kernel to a version where the pca9450 regulator module uses devm_register_sys_off_handler. This change allows the kernel to handle resource freeing properly and avoids the kernel dump caused by the notifier callback being registered multiple times.