cbcvebase.
CVE-2025-39934
published 2025-10-04

CVE-2025-39934: In the Linux kernel, the following vulnerability has been resolved: drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ If the interrupt occurs…

PriorityP419medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.14%
3.5th percentile
In the Linux kernel, the following vulnerability has been resolved: drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ If the interrupt occurs before resource initialization is complete, the interrupt handler/worker may access uninitialized data such as the I2C tcpc_client device, potentially leading to NULL pointer dereference.

Affected

26 ranges· showing 25
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.158-1 (bookworm)linux 6.1.158-1 (bookworm)
debianlinux-6.1< linux 6.1.158-1 (bookworm)linux 6.1.158-1 (bookworm)
linuxlinux
linuxlinux>= 8bdfc5dae4e3ba4d99dfb430ef43249e5f1b7730 < 51a501e990a353a4f15da6bab295b28e5d118f6451a501e990a353a4f15da6bab295b28e5d118f64
linuxlinux>= 8bdfc5dae4e3ba4d99dfb430ef43249e5f1b7730 < f9a089d0a6d537d0f2061c8a37a7de535ce0310ef9a089d0a6d537d0f2061c8a37a7de535ce0310e
linuxlinux>= 8bdfc5dae4e3ba4d99dfb430ef43249e5f1b7730 < 15a77e1ab0a994d69b471c76b8d01117128dda2615a77e1ab0a994d69b471c76b8d01117128dda26
linuxlinux>= 8bdfc5dae4e3ba4d99dfb430ef43249e5f1b7730 < 0da73f7827691a5e2265b110d5fe12f29535ec920da73f7827691a5e2265b110d5fe12f29535ec92
linuxlinux>= 8bdfc5dae4e3ba4d99dfb430ef43249e5f1b7730 < 1a7ea294d57fb61485d11b3f2241d631d73025cb1a7ea294d57fb61485d11b3f2241d631d73025cb
linuxlinux>= 8bdfc5dae4e3ba4d99dfb430ef43249e5f1b7730 < a10f910c77f280327b481e77eab909934ec508f0a10f910c77f280327b481e77eab909934ec508f0
linuxlinux_kernel
linuxlinux_kernel>= 0 < 6.1.158-16.1.158-1
linuxlinux_kernel>= 0 < 6.12.57-16.12.57-1
linuxlinux_kernel>= 0 < 6.16.9-16.16.9-1
linuxlinux_kernel>= 0 < 5.15.0-170.1805.15.0-170.180
linuxlinux_kernel>= 0 < 6.8.0-106.1066.8.0-106.106
linuxlinux_kernel>= 5.11 < 5.15.1945.15.194
linuxlinux_kernel>= 5.16 < 6.1.1546.1.154
linuxlinux_kernel>= 6.13 < 6.16.96.16.9
linuxlinux_kernel>= 6.2 < 6.6.1086.6.108
linuxlinux_kernel>= 6.7 < 6.12.496.12.49
msrcazl3_kernel_6.6.104.2-4_on_azure_linux_3.0
msrcazl3_kernel_6.6.96.2-2_on_azure_linux_3.0
ubuntulinux-azure-5.15
ubuntulinux-intel-iotg-5.15
ubuntulinux-xilinx

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv7.8HIGH
vendor_ubuntu7.8HIGH
vendor_debian5.5MEDIUM
vendor_msrc5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.