Home

Description

In the Linux kernel, the following vulnerability has been resolved: iio: adc: rzg2l_adc: Set driver data before enabling runtime PM When stress-testing the system by repeatedly unbinding and binding the ADC device in a loop, and the ADC is a supplier for another device (e.g., a thermal hardware block that reads temperature through the ADC), it may happen that the ADC device is runtime-resumed immediately after runtime PM is enabled, triggered by its consumer. At this point, since drvdata is not yet set and the driver's runtime PM callbacks rely on it, a crash can occur. To avoid this, set drvdata just after it was allocated.

PUBLISHED Reserved 2025-04-16 | Published 2025-09-11 | Updated 2025-09-29 | Assigner Linux

Product status

Default status
unaffected

89ee8174e8c8db0efc75b26f2307114b38d61354 (git) before e7ce902db071a7b3e696a43d6e14ca57360deee6
affected

89ee8174e8c8db0efc75b26f2307114b38d61354 (git) before c69e13965f26b8058f538ea8bdbd2d7718cf1fbe
affected

Default status
affected

6.14
affected

Any version before 6.14
unaffected

6.16.4 (semver)
unaffected

6.17 (original_commit_for_fix)
unaffected

References

git.kernel.org/...c/e7ce902db071a7b3e696a43d6e14ca57360deee6

git.kernel.org/...c/c69e13965f26b8058f538ea8bdbd2d7718cf1fbe

cve.org (CVE-2025-39774)

nvd.nist.gov (CVE-2025-39774)

Download JSON