CVE-2025-39794 in Linux

Riassunto

di MITRE • 12/09/2025

In the Linux kernel, the following vulnerability has been resolved:

ARM: tegra: Use I/O memcpy to write to IRAM

Kasan crashes the kernel trying to check boundaries when using the normal memcpy.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Responsabile: Linux
• Prenotare: 16/04/2025
• Divulgazione: 12/09/2025
• Moderazione: accettato
• Voce: VDB-323796
• CPE: pronto
• CWE: CWE-404 (confermato)
• CVSS: 5.5 (NVD)
• EPSS: 0.00159
• KEV: no
• Attività: molto basso
• Settore: Finance, Police, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-39794
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-39794
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-39794/