Critical Vulnerability in Linux Kernel Affecting Debian Packages
Summary
CVE-2025-39794: In the Linux kernel, the following vulnerability has been resolved: ARM: tegra: Use I/O memcpy to write to IRAM Kasan crashes the kernel trying to check boundaries when using the normal memcpy. Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Debian operating system, responsible for managing hardware resources and providing essential services for software applications. It is a critical piece of software that ensures system stability and performance. The kernel is continuously updated to address security vulnerabilities, improve functionality, and enhance performance. However, vulnerabilities can arise, impacting the security and reliability of the system.
Vulnerability Detail
CVE-2025-39794 is a vulnerability in the Linux kernel that affects multiple Debian versions. The issue originates from the ARM architecture, specifically within the Tegra platform, where the kernel uses standard memory copy operations instead of I/O specific memcpy functions to write to Internal RAM (IRAM). This can lead to kernel crashes when the Kernel Address Sanitizer (Kasan) attempts to check memory boundaries, potentially resulting in system instability and security risks.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there are no specific workarounds provided for this vulnerability. It is recommended to apply the patch as soon as it is available to mitigate risks.
Conclusion
CVE-2025-39794 is a critical vulnerability in the Linux kernel affecting multiple Debian versions. It is essential to update to the patched versions to mitigate risks associated with this issue. Regular updates and monitoring are crucial for maintaining system security.
See every vulnerability recorded for linux →
FAQ
CVE-2025-39794 is a vulnerability in the Linux kernel affecting Debian systems, which can lead to kernel crashes due to improper memory operations.
Debian 11, 12, 13, and 14 are affected by this vulnerability, with specific patched versions available for Debian 13 and 14.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without requiring any installation.
The vulnerability can lead to kernel crashes, system instability, and potential security risks if exploited.
It is recommended to regularly check for updates and apply them promptly to ensure your system is secure and stable.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
