CVE-2025-39846: pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region()
In the Linux kernel, the following vulnerability has been resolved:
pcmcia: Fix a NULL pointer dereference in iodynfindioregion()
In iodynfindioregion(), pcmciamakeresource() is assigned to res and used in pcibusallocresource(). There is a dereference of res in pcibusallocresource(), which could lead to a NULL pointer dereference on failure of pcmciamakeresource().
Fix this bug by adding a check of res.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-39846?
CVE-2025-39846 has been classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2025-39846?
To mitigate CVE-2025-39846, you should update your Linux kernel to the latest patched version provided by your distribution.
What systems are affected by CVE-2025-39846?
CVE-2025-39846 affects the Linux kernel across various distributions that utilize the pcmcia subsystem.
What happens if CVE-2025-39846 is exploited?
Exploitation of CVE-2025-39846 can lead to a NULL pointer dereference resulting in a system crash or denial of service.
Is there a workaround for CVE-2025-39846?
Currently, no specific workarounds are recommended, and the best approach is to apply the available security updates.