5.5

CVE-2025-39934

drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ

In the Linux kernel, the following vulnerability has been resolved:

drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ

If the interrupt occurs before resource initialization is complete, the
interrupt handler/worker may access uninitialized data such as the I2C
tcpc_client device, potentially leading to NULL pointer dereference.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 5.11 < 5.15.194
Linux ≫ Linux Kernel Version >= 5.16 < 6.1.154
Linux ≫ Linux Kernel Version >= 6.2 < 6.6.108
Linux ≫ Linux Kernel Version >= 6.7 < 6.12.49
Linux ≫ Linux Kernel Version >= 6.13 < 6.16.9
Linux ≫ Linux Kernel Version6.17 Updaterc1
Linux ≫ Linux Kernel Version6.17 Updaterc2
Linux ≫ Linux Kernel Version6.17 Updaterc3
Linux ≫ Linux Kernel Version6.17 Updaterc4
Linux ≫ Linux Kernel Version6.17 Updaterc5
Linux ≫ Linux Kernel Version6.17 Updaterc6
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.14% 0.035
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

https://git.kernel.org/stable/c/51a501e990a353a4f15da6bab295b28e5d118f64
Patch
https://git.kernel.org/stable/c/f9a089d0a6d537d0f2061c8a37a7de535ce0310e
Patch
https://git.kernel.org/stable/c/15a77e1ab0a994d69b471c76b8d01117128dda26
Patch
https://git.kernel.org/stable/c/0da73f7827691a5e2265b110d5fe12f29535ec92
Patch
https://git.kernel.org/stable/c/1a7ea294d57fb61485d11b3f2241d631d73025cb
Patch
https://git.kernel.org/stable/c/a10f910c77f280327b481e77eab909934ec508f0
Patch