CVE-2025-39920: pcmcia: Add error handling for add_interval() in do_validate_mem()
In the Linux kernel, the following vulnerability has been resolved:
pcmcia: Add error handling for addinterval() in dovalidatemem()
In the dovalidatemem(), the call to addinterval() does not handle errors. If kmalloc() fails in addinterval(), it could result in a null pointer being inserted into the linked list, leading to illegal memory access when subinterval() is called next.
This patch adds an error handling for the addinterval(). If addinterval() returns an error, the function will return early with the error code.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-39920?
CVE-2025-39920 is classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2025-39920?
To fix CVE-2025-39920, you need to update to the latest version of the Linux kernel that includes the patch for this vulnerability.
What is the main issue addressed in CVE-2025-39920?
CVE-2025-39920 addresses the lack of error handling in the do_validate_mem() function within the Linux kernel's pcmcia subsystem.
Is CVE-2025-39920 exploitable remotely?
CVE-2025-39920 is not considered a remote exploitation vulnerability, as it primarily affects local kernel operations.
What versions of the Linux kernel are affected by CVE-2025-39920?
CVE-2025-39920 affects specific versions of the Linux kernel prior to the application of the security patch that resolves this issue.