CVE-2025-39699
- Source
- https://cve.org/CVERecord?id=CVE-2025-39699
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-39699.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2025-39699
- Downstream
- Published
- 2025-09-05T17:21:05.379Z
- Modified
- 2026-03-09T23:56:52.421172Z
- Summary
- iommu/riscv: prevent NULL deref in iova_to_phys
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
iommu/riscv: prevent NULL deref in iovatophys
The riscviommupte_fetch() function returns either NULL for unmapped/never-mapped iova, or a valid leaf pte pointer that requires no further validation.
riscviommuiovatophys() failed to handle NULL returns. Prevent null pointer dereference in riscviommuiovatophys(), and remove the pte validation.
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39699.json", "cna_assigner": "Linux" }- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/220c491490255b656672bb572b18460cd9155926
- https://git.kernel.org/stable/c/99d4d1a070870aa08163af8ce0522992b7f35d8c
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39699.json
- https://nvd.nist.gov/vuln/detail/CVE-2025-39699