CVE-2025-39906 — NULL Pointer Dereference in Linux

CWE-476 — NULL Pointer Dereference5 documents5 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 95.28%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
LinuxLinux KernelDebian Linux
Timeline
PublishedOct 1

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: remove oem i2c adapter on finish Fixes a bug where unbinding of the GPU would leave the oem i2c adapter registered resulting in a null pointer dereference when applications try to access the invalid device. (cherry picked from commit 89923fb7ead4fdd37b78dd49962d9bb5892403e6)

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages4 packages

▶NVDlinux/linux_kernel6.15 — 6.16.8+1
▶Debianlinux/linux_kernel< 6.16.8-1
▶CVEListV5linux/linux3d5470c973149f479572dcf4eea064775041ea6c — c686124bcf06253620790857ff462f00f3f7a4ab+2
▶debiandebian/linux< linux 6.16.8-1 (forky)

Patches

Patch: git.kernel.org ↗Patch: git.kernel.org ↗

🔴Vulnerability Details

2
OSV
CVE-2025-39906: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: remove oem i2c adapter on finish Fixes a bug where unbinding of t↗2025-10-01
▶
GHSA
GHSA-jcmj-4vm7-4478: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: remove oem i2c adapter on finish Fixes a bug where unbinding of↗2025-10-01
▶

📋Vendor Advisories

2
Red Hat
kernel: drm/amd/display: remove oem i2c adapter on finish↗2025-10-01
▶
Debian
CVE-2025-39906: linux - In the Linux kernel, the following vulnerability has been resolved: drm/amd/dis...↗2025
▶