CVE detail
CVE-2025-39920
In the Linux kernel, the following vulnerability has been resolved: pcmcia: Add error handling for add_interval() in do_validate_mem() In the do_validate_mem(), the call to add_interval() does not handle errors. If kmalloc() fails in add_interval(), it could result in a null pointer being inserted into the linked list, leading to illegal memory access when sub_interval() is called next. This patch adds an error handling for the add_interval(). If add_interval() returns an error, the function will return early with the error code.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 24.0 · diversity 10.0 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
10 source links · newest first
No excerpt available.
Vendor Advisorylists.debian.orgOct 1, 2025, 8:15 AMNo excerpt available.
Vendor Advisorylists.debian.orgOct 1, 2025, 8:15 AMNo excerpt available.
Exploitgit.kernel.orgOct 1, 2025, 8:15 AMNo excerpt available.
Exploitgit.kernel.orgOct 1, 2025, 8:15 AMNo excerpt available.
Exploitgit.kernel.orgOct 1, 2025, 8:15 AMNo excerpt available.
Exploitgit.kernel.orgOct 1, 2025, 8:15 AMNo excerpt available.
Exploitgit.kernel.orgOct 1, 2025, 8:15 AMNo excerpt available.
Exploitgit.kernel.orgOct 1, 2025, 8:15 AMNo excerpt available.
Exploitgit.kernel.orgOct 1, 2025, 8:15 AMNo excerpt available.
Exploitgit.kernel.orgOct 1, 2025, 8:15 AM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2025-39902CVSS 7.1 · High
In the Linux kernel, the following vulnerability has been resolved: mm/slub: avoid accessing metadata when pointer is invalid in object_err() object_err() reports details of an…
- CVE-2025-39876CVSS 5.5 · Medium
In the Linux kernel, the following vulnerability has been resolved: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() The function of_phy_find_device may retur…
- CVE-2025-39865CVSS 5.5 · Medium
In the Linux kernel, the following vulnerability has been resolved: tee: fix NULL pointer dereference in tee_shm_put tee_shm_put have NULL pointer dereference: __optee_disable_…
- CVE-2025-39857CVSS 7.5 · High
In the Linux kernel, the following vulnerability has been resolved: net/smc: fix one NULL pointer dereference in smc_ib_is_sg_need_sync() BUG: kernel NULL pointer dereference, a…
- CVE-2025-39846CVSS 5.5 · Medium
In the Linux kernel, the following vulnerability has been resolved: pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region() In __iodyn_find_io_region(), pcmcia_make_r…
- CVE-2025-39838CVSS 5.5 · Medium
In the Linux kernel, the following vulnerability has been resolved: cifs: prevent NULL pointer dereference in UTF16 conversion There can be a NULL pointer dereference bug here.…