CVE-2025-39709

media: venus: protect against spurious interrupts during probe

MEDIUM
5.5
CVSS Score
Published: September 5, 2025 at 05:21 PM UTC
Updated: October 19, 2026 at 09:10 PM UTC
3 products affected across 3 vendorsLinux KernelDebian LinuxSIMATIC CN 4100

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: media: venus: protect against spurious interrupts during probe Make sure the interrupt handler is initialized before the interrupt is registered. If the IRQ is registered before hfi_create(), it's possible that an interrupt fires before the handler setup is complete, leading to a NULL dereference. This error condition has been observed during system boot on Rb3Gen2.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

All versions4.13 ≤ v < 5.4.2975.11 ≤ v < 5.15.1905.16 ≤ v < 6.1.1495.5 ≤ v < 5.10.2416.13 ≤ v < 6.16.46.2 ≤ v < 6.6.1036.7 ≤ v < 6.12.444.13af2c3834c8ca7cc65d15592ac671933df8848115
Vendor states this is fixed in 18c2b2bd982b8546312c9a7895515672169f28e0 (fixed)
Vendor states this is fixed in 3200144a2fa4209dc084a19941b9b203b43580f0 (fixed)
Vendor states this is fixed in 37cc0ac889b018097c217c5929fd6dc2aed636a1 (fixed)
Vendor states this is fixed in 639eb587f977c02423f4762467055b23902b4131 (fixed)
Vendor states this is fixed in 88cf63c2599761c48dec8f618d57dccf8f6f4b53 (fixed)
Vendor states this is fixed in 9db6a78bc5e418e0064e2248c8f3b9b9e8418646 (fixed)
Vendor states this is fixed in e796028b4835af00d9a38ebbb208ec3a6634702a (fixed)
Vendor states this is fixed in f54be97bc69b1096198b6717c150dec69f2a1b4d (fixed)
Vendor states this is fixed in 4.13 (unaffected)
Vendor states this is fixed in 5.10.241 (unaffected)
Vendor states this is fixed in 5.15.190 (unaffected)
Vendor states this is fixed in 5.4.297 (unaffected)
Vendor states this is fixed in 6.1.149 (unaffected)
Vendor states this is fixed in 6.12.44 (unaffected)
Vendor states this is fixed in 6.16.4 (unaffected)
Vendor states this is fixed in 6.17 (unaffected)
Vendor states this is fixed in 6.6.103 (unaffected)
v < V5.0
Affected range stops below V5.0, so it looks safe — our inference, not a vendor statement

References (11)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/18c2b2bd982b8546312c9a7895515672169f28e0
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/3200144a2fa4209dc084a19941b9b203b43580f0
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/37cc0ac889b018097c217c5929fd6dc2aed636a1
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/639eb587f977c02423f4762467055b23902b4131
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/88cf63c2599761c48dec8f618d57dccf8f6f4b53
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/9db6a78bc5e418e0064e2248c8f3b9b9e8418646
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/e796028b4835af00d9a38ebbb208ec3a6634702a
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/f54be97bc69b1096198b6717c150dec69f2a1b4d

CVSS

5.5MEDIUMLinux
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-476

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card