In the Linux kernel, the following vulnerability has been resolved:
pcmcia: Add error handling for addinterval() in dovalidate_mem()
In the dovalidatemem(), the call to addinterval() does not handle errors. If kmalloc() fails in addinterval(), it could result in a null pointer being inserted into the linked list, leading to illegal memory access when sub_interval() is called next.
This patch adds an error handling for the addinterval(). If addinterval() returns an error, the function will return early with the error code.
[
{
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"207098947228012143628635876335460433273",
"144351452727346129498243546324443558912",
"162122026045467762850341452770134096613",
"289088057763381394340336957840086401155"
]
},
"id": "CVE-2025-39920-00e94aea",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@06b26e3099207c94b3d1be8565aedc6edc4f0a60",
"target": {
"file": "drivers/pcmcia/rsrc_nonstatic.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"digest": {
"function_hash": "126823823944491583887022714563831414438",
"length": 1007.0
},
"id": "CVE-2025-39920-0331cca4",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8699358b6ac99b8ccc97ed9e6e3669ef8958ef7b",
"target": {
"function": "do_validate_mem",
"file": "drivers/pcmcia/rsrc_nonstatic.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"digest": {
"function_hash": "126823823944491583887022714563831414438",
"length": 1007.0
},
"id": "CVE-2025-39920-06e9ddee",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@369bf6e241506583f4ee7593c53b92e5a9f271b4",
"target": {
"function": "do_validate_mem",
"file": "drivers/pcmcia/rsrc_nonstatic.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"207098947228012143628635876335460433273",
"144351452727346129498243546324443558912",
"162122026045467762850341452770134096613",
"289088057763381394340336957840086401155"
]
},
"id": "CVE-2025-39920-094c16df",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5b60ed401b47897352c520bc724c85aa908dedcc",
"target": {
"file": "drivers/pcmcia/rsrc_nonstatic.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"207098947228012143628635876335460433273",
"144351452727346129498243546324443558912",
"162122026045467762850341452770134096613",
"289088057763381394340336957840086401155"
]
},
"id": "CVE-2025-39920-26322fe7",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ae184024ef31423e5beb44cf4f52999bbcf2fe5b",
"target": {
"file": "drivers/pcmcia/rsrc_nonstatic.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"digest": {
"function_hash": "126823823944491583887022714563831414438",
"length": 1007.0
},
"id": "CVE-2025-39920-3d1615cb",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4a81f78caa53e0633cf311ca1526377d9bff7479",
"target": {
"function": "do_validate_mem",
"file": "drivers/pcmcia/rsrc_nonstatic.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"207098947228012143628635876335460433273",
"144351452727346129498243546324443558912",
"162122026045467762850341452770134096613",
"289088057763381394340336957840086401155"
]
},
"id": "CVE-2025-39920-5f7c4d92",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8699358b6ac99b8ccc97ed9e6e3669ef8958ef7b",
"target": {
"file": "drivers/pcmcia/rsrc_nonstatic.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"digest": {
"function_hash": "218456790843935124117035074471517372128",
"length": 1001.0
},
"id": "CVE-2025-39920-6d63f1ef",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5b60ed401b47897352c520bc724c85aa908dedcc",
"target": {
"function": "do_validate_mem",
"file": "drivers/pcmcia/rsrc_nonstatic.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"207098947228012143628635876335460433273",
"144351452727346129498243546324443558912",
"162122026045467762850341452770134096613",
"289088057763381394340336957840086401155"
]
},
"id": "CVE-2025-39920-8512f476",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4a81f78caa53e0633cf311ca1526377d9bff7479",
"target": {
"file": "drivers/pcmcia/rsrc_nonstatic.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"digest": {
"function_hash": "126823823944491583887022714563831414438",
"length": 1007.0
},
"id": "CVE-2025-39920-99c7a194",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@289b58f8ff3198d091074a751d6b8f6827726f3e",
"target": {
"function": "do_validate_mem",
"file": "drivers/pcmcia/rsrc_nonstatic.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"digest": {
"function_hash": "126823823944491583887022714563831414438",
"length": 1007.0
},
"id": "CVE-2025-39920-9b52b2b7",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@85be7ef8c8e792a414940a38d94565dd48d2f236",
"target": {
"function": "do_validate_mem",
"file": "drivers/pcmcia/rsrc_nonstatic.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"207098947228012143628635876335460433273",
"144351452727346129498243546324443558912",
"162122026045467762850341452770134096613",
"289088057763381394340336957840086401155"
]
},
"id": "CVE-2025-39920-a7cca47a",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@85be7ef8c8e792a414940a38d94565dd48d2f236",
"target": {
"file": "drivers/pcmcia/rsrc_nonstatic.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"digest": {
"function_hash": "126823823944491583887022714563831414438",
"length": 1007.0
},
"id": "CVE-2025-39920-a8e8e2b4",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@06b26e3099207c94b3d1be8565aedc6edc4f0a60",
"target": {
"function": "do_validate_mem",
"file": "drivers/pcmcia/rsrc_nonstatic.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"207098947228012143628635876335460433273",
"144351452727346129498243546324443558912",
"162122026045467762850341452770134096613",
"289088057763381394340336957840086401155"
]
},
"id": "CVE-2025-39920-d269b4d0",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@289b58f8ff3198d091074a751d6b8f6827726f3e",
"target": {
"file": "drivers/pcmcia/rsrc_nonstatic.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"digest": {
"function_hash": "218456790843935124117035074471517372128",
"length": 1001.0
},
"id": "CVE-2025-39920-e2882762",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ae184024ef31423e5beb44cf4f52999bbcf2fe5b",
"target": {
"function": "do_validate_mem",
"file": "drivers/pcmcia/rsrc_nonstatic.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"207098947228012143628635876335460433273",
"144351452727346129498243546324443558912",
"162122026045467762850341452770134096613",
"289088057763381394340336957840086401155"
]
},
"id": "CVE-2025-39920-f494d219",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@369bf6e241506583f4ee7593c53b92e5a9f271b4",
"target": {
"file": "drivers/pcmcia/rsrc_nonstatic.c"
}
}
]