CVE-2025-39709

Summary

In the Linux kernel, the following vulnerability has been resolved:

media: venus: protect against spurious interrupts during probe

Make sure the interrupt handler is initialized before the interrupt is registered.

If the IRQ is registered before hfi_create(), it's possible that an interrupt fires before the handler setup is complete, leading to a NULL dereference.

This error condition has been observed during system boot on Rb3Gen2.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxaf2c3834c8ca7cc65d15592ac671933df8848115 < 18c2b2bd982b8546312c9a7895515672169f28e0affected
LinuxLinuxaf2c3834c8ca7cc65d15592ac671933df8848115 < 88cf63c2599761c48dec8f618d57dccf8f6f4b53affected
LinuxLinuxaf2c3834c8ca7cc65d15592ac671933df8848115 < 9db6a78bc5e418e0064e2248c8f3b9b9e8418646affected
LinuxLinuxaf2c3834c8ca7cc65d15592ac671933df8848115 < 37cc0ac889b018097c217c5929fd6dc2aed636a1affected
LinuxLinuxaf2c3834c8ca7cc65d15592ac671933df8848115 < f54be97bc69b1096198b6717c150dec69f2a1b4daffected
LinuxLinuxaf2c3834c8ca7cc65d15592ac671933df8848115 < 639eb587f977c02423f4762467055b23902b4131affected
LinuxLinuxaf2c3834c8ca7cc65d15592ac671933df8848115 < e796028b4835af00d9a38ebbb208ec3a6634702aaffected
LinuxLinuxaf2c3834c8ca7cc65d15592ac671933df8848115 < 3200144a2fa4209dc084a19941b9b203b43580f0affected
LinuxLinux4.13affected
LinuxLinux0 < 4.13unaffected
LinuxLinux5.4.297 <= 5.4.*unaffected
LinuxLinux5.10.241 <= 5.10.*unaffected
LinuxLinux5.15.190 <= 5.15.*unaffected
LinuxLinux6.1.149 <= 6.1.*unaffected
LinuxLinux6.6.103 <= 6.6.*unaffected
LinuxLinux6.12.44 <= 6.12.*unaffected
LinuxLinux6.16.4 <= 6.16.*unaffected
LinuxLinux6.17 <= *unaffected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

Additional References

References