CVE-2025-39699
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
05/09/2025
Last modified:
08/09/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
iommu/riscv: prevent NULL deref in iova_to_phys<br />
<br />
The riscv_iommu_pte_fetch() function returns either NULL for<br />
unmapped/never-mapped iova, or a valid leaf pte pointer that<br />
requires no further validation.<br />
<br />
riscv_iommu_iova_to_phys() failed to handle NULL returns.<br />
Prevent null pointer dereference in<br />
riscv_iommu_iova_to_phys(), and remove the pte validation.