CVE-2025-39747

MEDIUM EPSS 4.1%

Published Sep 11, 20259mo ago · Modified Jun 17, 20262w ago

5.5 CVSS 3.1

Medium

Published Sep 11, 2025 9mo ago

Last Modified Jun 17, 2026 2w ago

Description

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Add error handling for krealloc in metadata setup Function msm_ioctl_gem_info_set_metadata() now checks for krealloc failure and returns -ENOMEM, avoiding potential NULL pointer dereference. Explicitly avoids __GFP_NOFAIL due to deadlock risks and allocation constraints. Patchwork: https://patchwork.freedesktop.org/patch/661235/

CVSS Details

Base Score

5.5

Exploitability

1.8

Impact

3.6

Vector string

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector Local

Attack Complexity Low

Privileges Required Low

User Interaction None

Scope Unchanged

Confidentiality None

Integrity None

Availability High

Threat Intelligence

EPSS Exploit Probability

4.1% percentile

Exploit & Patch Status

No Known Exploit

Patch Available

Weaknesses 1

CWE-476 NULL Pointer Dereference Memory Safety

Affected Products 3

Vendor	Product	Version	Range
linux	linux_kernel	*	≥3.12 – <6.12.43
linux	linux_kernel	*	≥6.13 – <6.15.11
linux	linux_kernel	*	≥6.16 – <6.16.2

References 4

git.kernel.org https://git.kernel.org/stable/c/01e3eda8edc3c4caaa49261d1a56c799b0bd6268

Patch
git.kernel.org https://git.kernel.org/stable/c/1c8c354098ea9d4376a58c96ae6b65288a6f15d8

Patch
git.kernel.org https://git.kernel.org/stable/c/53dc780c1e94ea782d8936b41bfaa83c663702eb

Patch
git.kernel.org https://git.kernel.org/stable/c/d5386bcede7b57b193c658dcbb9d22004cde7580

Patch

Remediation

git.kernel.org https://git.kernel.org/stable/c/01e3eda8edc3c4caaa49261d1a56c799b0bd6268

Patch
git.kernel.org https://git.kernel.org/stable/c/1c8c354098ea9d4376a58c96ae6b65288a6f15d8

Patch
git.kernel.org https://git.kernel.org/stable/c/53dc780c1e94ea782d8936b41bfaa83c663702eb

Patch
git.kernel.org https://git.kernel.org/stable/c/d5386bcede7b57b193c658dcbb9d22004cde7580

Patch