CVE-2025-39937 — NULL Pointer Dereference in Linux
Severity
5.5MEDIUMNVD
OSV7.8OSV3.2
EPSS
0.0%
top 92.84%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedOct 4
Latest updateApr 13
Description
In the Linux kernel, the following vulnerability has been resolved:
net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer
Since commit 7d5e9737efda ("net: rfkill: gpio: get the name and type from
device property") rfkill_find_type() gets called with the possibly
uninitialized "const char *type_name;" local variable.
On x86 systems when rfkill-gpio binds to a "BCM4752" or "LNV4752"
acpi_device, the rfkill->type is set based on the ACPI acpi_device_id:
rfkill->type = (unsig…
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6
Affected Packages8 packages
Patches
🔴Vulnerability Details
21📋Vendor Advisories
23🕵️Threat Intelligence
1💬Community
1Bugzilla▶
CVE-2025-39937 kernel: Linux kernel (rfkill-gpio): Denial of Service via uninitialized pointer dereference↗2025-10-04