CVE-2025-39934

EUVD-2025-32402
In the Linux kernel, the following vulnerability has been resolved:

drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ

If the interrupt occurs before resource initialization is complete, the
interrupt handler/worker may access uninitialized data such as the I2C
tcpc_client device, potentially leading to NULL pointer dereference.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 9%
Affected Products (NVD)
VendorProductVersion
linuxlinux_kernel
5.11 ≤
𝑥
< 5.15.194
linuxlinux_kernel
5.16 ≤
𝑥
< 6.1.154
linuxlinux_kernel
6.2 ≤
𝑥
< 6.6.108
linuxlinux_kernel
6.7 ≤
𝑥
< 6.12.49
linuxlinux_kernel
6.13 ≤
𝑥
< 6.16.9
linuxlinux_kernel
6.17:rc1
linuxlinux_kernel
6.17:rc2
linuxlinux_kernel
6.17:rc3
linuxlinux_kernel
6.17:rc4
linuxlinux_kernel
6.17:rc5
linuxlinux_kernel
6.17:rc6
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://git.kernel.org/stable/c/0da73f7827691a5e2265b110d5fe12f29535ec92
https://git.kernel.org/stable/c/15a77e1ab0a994d69b471c76b8d01117128dda26
https://git.kernel.org/stable/c/1a7ea294d57fb61485d11b3f2241d631d73025cb
https://git.kernel.org/stable/c/51a501e990a353a4f15da6bab295b28e5d118f64
https://git.kernel.org/stable/c/a10f910c77f280327b481e77eab909934ec508f0
https://git.kernel.org/stable/c/f9a089d0a6d537d0f2061c8a37a7de535ce0310e