CVE-2025-39774

{"id": "CVE-2025-39774", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "89ee8174e8c8db0efc75b26f2307114b38d61354", "lessThan": "e7ce902db071a7b3e696a43d6e14ca57360deee6", "versionType": "git"}, {"status": "affected", "version": "89ee8174e8c8db0efc75b26f2307114b38d61354", "lessThan": "c69e13965f26b8058f538ea8bdbd2d7718cf1fbe", "versionType": "git"}], "programFiles": ["drivers/iio/adc/rzg2l_adc.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.14"}, {"status": "unaffected", "version": "0", "lessThan": "6.14", "versionType": "semver"}, {"status": "unaffected", "version": "6.16.4", "versionType": "semver", "lessThanOrEqual": "6.16.*"}, {"status": "unaffected", "version": "6.17", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/iio/adc/rzg2l_adc.c"], "defaultStatus": "affected"}]}], "published": "2025-09-11T17:15:43.167", "references": [{"url": "https://git.kernel.org/stable/c/c69e13965f26b8058f538ea8bdbd2d7718cf1fbe", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/e7ce902db071a7b3e696a43d6e14ca57360deee6", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: rzg2l_adc: Set driver data before enabling runtime PM\n\nWhen stress-testing the system by repeatedly unbinding and binding the ADC\ndevice in a loop, and the ADC is a supplier for another device (e.g., a\nthermal hardware block that reads temperature through the ADC), it may\nhappen that the ADC device is runtime-resumed immediately after runtime PM\nis enabled, triggered by its consumer. At this point, since drvdata is not\nyet set and the driver's runtime PM callbacks rely on it, a crash can\noccur. To avoid this, set drvdata just after it was allocated."}, {"lang": "es", "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\niio: adc: rzg2l_adc: Establecer los datos del controlador antes de habilitar el PM en tiempo de ejecuci\u00f3n\n\nAl realizar pruebas de estr\u00e9s en el sistema desvinculando y vinculando repetidamente el dispositivo ADC en un bucle, y el ADC es un proveedor para otro dispositivo (por ejemplo, un bloque de hardware t\u00e9rmico que lee la temperatura a trav\u00e9s del ADC), puede ocurrir que el dispositivo ADC se reanude en tiempo de ejecuci\u00f3n inmediatamente despu\u00e9s de que se habilite el PM en tiempo de ejecuci\u00f3n, activado por su consumidor. En este punto, dado que drvdata a\u00fan no est\u00e1 establecido y las devoluciones de llamada de PM en tiempo de ejecuci\u00f3n del controlador dependen de \u00e9l, puede ocurrir un fallo. Para evitar esto, establezca drvdata justo despu\u00e9s de que fuera asignado."}], "lastModified": "2026-10-19T21:10:00.160", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "193583C3-9388-4FFF-8341-D8DC6D763A1D", "versionEndExcluding": "6.16.4", "versionStartIncluding": "6.14"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.17:rc1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "327D22EF-390B-454C-BD31-2ED23C998A1C"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.17:rc2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C730CD9A-D969-4A8E-9522-162AAF7C0EE9"}], "operator": "OR"}]}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}