CVE-2025-39777

In the Linux kernel, the following vulnerability has been resolved: crypto: acomp - Fix CFI failure due to type punning To avoid a crash when control flow integrity is enabled, make the workspace ("stream") free function use a consistent type, and call it through a function pointer that has that same type.

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://git.kernel.org/stable/c/7ec68c59461ca846aab9b7c2b39f63ac7c8a43cf	Patch
https://git.kernel.org/stable/c/962ddc5a7a4b04c007bba0f3e7298cda13c62efd	Patch

Configurations

Configuration 1 (hide)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

History

19 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta: crypto: acomp - Corregir fallo de CFI debido a la reinterpretación de tipos Para evitar un fallo cuando la integridad del flujo de control está habilitada, hacer que la función de liberación del espacio de trabajo ('stream') use un tipo consistente, y la llame a través de un puntero a función que tenga ese mismo tipo.

Information

Published : 2025-09-11 17:15

Updated : 2026-10-19 21:10

NVD link : CVE-2025-39777

Mitre link : CVE-2025-39777

CVE.ORG link : CVE-2025-39777

JSON object : View

Products Affected

linux

linux_kernel

CWE

NVD-CWE-noinfo

{"id": "CVE-2025-39777", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "42d9f6c774790d290c175e8775ce9f1366438098", "lessThan": "7ec68c59461ca846aab9b7c2b39f63ac7c8a43cf", "versionType": "git"}, {"status": "affected", "version": "42d9f6c774790d290c175e8775ce9f1366438098", "lessThan": "962ddc5a7a4b04c007bba0f3e7298cda13c62efd", "versionType": "git"}], "programFiles": ["crypto/deflate.c", "crypto/zstd.c", "include/crypto/internal/acompress.h"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.16"}, {"status": "unaffected", "version": "0", "lessThan": "6.16", "versionType": "semver"}, {"status": "unaffected", "version": "6.16.4", "versionType": "semver", "lessThanOrEqual": "6.16.*"}, {"status": "unaffected", "version": "6.17", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["crypto/deflate.c", "crypto/zstd.c", "include/crypto/internal/acompress.h"], "defaultStatus": "affected"}]}], "published": "2025-09-11T17:15:43.610", "references": [{"url": "https://git.kernel.org/stable/c/7ec68c59461ca846aab9b7c2b39f63ac7c8a43cf", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/962ddc5a7a4b04c007bba0f3e7298cda13c62efd", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: acomp - Fix CFI failure due to type punning\n\nTo avoid a crash when control flow integrity is enabled, make the\nworkspace (\"stream\") free function use a consistent type, and call it\nthrough a function pointer that has that same type."}, {"lang": "es", "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ncrypto: acomp - Corregir fallo de CFI debido a la reinterpretaci\u00f3n de tipos\n\nPara evitar un fallo cuando la integridad del flujo de control est\u00e1 habilitada, hacer que la funci\u00f3n de liberaci\u00f3n del espacio de trabajo ('stream') use un tipo consistente, y la llame a trav\u00e9s de un puntero a funci\u00f3n que tenga ese mismo tipo."}], "lastModified": "2026-10-19T21:10:00.160", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "26A22BE8-0D22-4155-AED4-BB823BB934AB", "versionEndExcluding": "6.16.4", "versionStartIncluding": "6.16"}], "operator": "OR"}]}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}