Critical Vulnerability in Linux Kernel Affecting Debian Packages: CVE-2025-39790
Summary
CVE-2025-39790: In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Detect events pointing to unexpected TREs When a remote device sends a completion event to the host, it contains a pointer to the consum... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Debian operating system, responsible for managing hardware resources and providing essential services to applications. It is known for its stability, performance, and security features. However, vulnerabilities can arise, impacting the integrity and security of the system. CVE-2025-39790 highlights a specific flaw in the kernel's handling of transaction events, which can lead to severe consequences if exploited.
Vulnerability Detail
CVE-2025-39790 is a vulnerability in the Linux kernel that arises from improper handling of completion events sent by remote devices. When a device sends an event pointing to a Transaction Request Element (TRE), it may point to stale data if the host accesses the event ring while the device is updating it. This can lead to double-free errors, causing instability and potential system crashes. The vulnerability was observed in scenarios where the event pointer is not immediately after the last processed TRE, leading to incorrect processing of events and potential exploitation.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users should avoid accessing the event ring while the device is updating it. This can help mitigate the risk of encountering stale data and double-free errors until a patch is applied.
Conclusion
CVE-2025-39790 is a critical vulnerability in the Linux kernel affecting multiple Debian versions. It is crucial for users to update their systems to the latest patched versions to mitigate risks associated with this vulnerability. Utilizing tools like Vulert can help monitor and alert users about such vulnerabilities in real-time.
See every vulnerability recorded for linux →
FAQ
CVE-2025-39790 is a vulnerability in the Linux kernel that affects how completion events from remote devices are processed, potentially leading to system instability.
Debian 11, 12, 13, and 14 are all affected by this vulnerability in the Linux kernel.
You can use Vulert, which monitors open-source vulnerabilities in your software. By uploading your package-lock.json file, you can receive real-time alerts about vulnerabilities.
Exploitation of this vulnerability can lead to double-free errors, causing crashes and instability in the system, which may affect critical applications.
Yes, patches are available for the affected versions of the Linux kernel. Users should update their packages to ensure they are protected.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
