CVE-2025-39790: bus: mhi: host: Detect events pointing to unexpected TREs
Published Sep 11, 2025
·Updated
bus: mhi: host: Detect events pointing to unexpected TREs
Affected Software
7 affected components
Linux Linux kernel
Linux Linux kernel>=5.7<5.15.190
Linux Linux kernel>=5.16<6.1.149
Linux Linux kernel>=6.2<6.6.103
Linux Linux kernel>=6.7<6.12.44
Linux Linux kernel>=6.13<6.16.4
Debian Debian Linux=11.0
Event History
Sep 11, 2025
CVE Published
via MITRE·04:56 PM
Data Sourced
via MITRE·04:56 PM
DescriptionSeverity
Data Sourced
via NVD·05:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Sep 13, 2025
Data Sourced
via Microsoft·01:04 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-39790?
CVE-2025-39790 is classified as a security issue that affects the Linux kernel due to its potential exploitation through unexpected TRE pointers.
2
How do I fix CVE-2025-39790?
To remediate CVE-2025-39790, users should update their Linux kernel to the latest stable version that includes the patch addressing this vulnerability.
3
What systems are affected by CVE-2025-39790?
CVE-2025-39790 affects the Linux kernel across its various distributions where the vulnerable bus communication is implemented.
4
What type of vulnerability is CVE-2025-39790?
CVE-2025-39790 is a security vulnerability related to improper handling of completion events in the bus: mhi: host subsystem of the Linux kernel.
5
Is CVE-2025-39790 exploitable remotely?
Yes, CVE-2025-39790 can be exploited remotely if an attacker can send malicious completion events to a vulnerable host.