CVE-2025-39699
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2025-39699
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-39699.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2025-39699
- Downstream
- Published
- 2025-09-05T17:21:05.379Z
- Modified
- 2025-12-02T16:38:28.358673Z
- Summary
- iommu/riscv: prevent NULL deref in iova_to_phys
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
iommu/riscv: prevent NULL deref in iovatophys
The riscviommupte_fetch() function returns either NULL for unmapped/never-mapped iova, or a valid leaf pte pointer that requires no further validation.
riscviommuiovatophys() failed to handle NULL returns. Prevent null pointer dereference in riscviommuiovatophys(), and remove the pte validation.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39699.json" }- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/220c491490255b656672bb572b18460cd9155926
- https://git.kernel.org/stable/c/99d4d1a070870aa08163af8ce0522992b7f35d8c
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39699.json
- https://nvd.nist.gov/vuln/detail/CVE-2025-39699
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced488ffbf181718b9ad8c1838cb249d60973e78edaFixed220c491490255b656672bb572b18460cd9155926Fixed99d4d1a070870aa08163af8ce0522992b7f35d8c
Affected versions
v6.*
v6.12
v6.12-rc4
v6.12-rc5
v6.12-rc6
v6.12-rc7
v6.13
v6.13-rc1
v6.13-rc2
v6.13-rc3
v6.13-rc4
v6.13-rc5
v6.13-rc6
v6.13-rc7
v6.14
v6.14-rc1
v6.14-rc2
v6.14-rc3
v6.14-rc4
v6.14-rc5
v6.14-rc6
v6.14-rc7
v6.15
v6.15-rc1
v6.15-rc2
v6.15-rc3
v6.15-rc4
v6.15-rc5
v6.15-rc6
v6.15-rc7
v6.16
v6.16-rc1
v6.16-rc2
v6.16-rc3
v6.16-rc4
v6.16-rc5
v6.16-rc6
v6.16-rc7
v6.16.1
v6.16.2
v6.16.3
v6.17-rc1