CVE-2025-39701

HighCVSS 7.8/10Last modified Nov 5, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ACPI: pfr_update: Fix the driver update version check

The security-version-number check should be used rather than the runtime version check for driver updates.

Otherwise, the firmware update would fail when the update binary had a lower runtime version number than the current one.

[ rjw: Changelog edits ]

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
LinuxLinux>= 0db89fa243e5edc5de38c88b369e4c3755c5fb74, < 79300ff532bccbbf654992c7c0863b49a6c3973c; >= 0db89fa243e5edc5de38c88b369e4c3755c5fb74, < cf0a88124e357bffda487cbf3cb612bb97eb97e4; >= 0db89fa243e5edc5de38c88b369e4c3755c5fb74, < b00219888c11519ef75d988fa8a780da68ff568e; >= 0db89fa243e5edc5de38c88b369e4c3755c5fb74, < 908094681f645d3a78e18ef90561a97029e2df7b; >= 0db89fa243e5edc5de38c88b369e4c3755c5fb74, < 8151320c747efb22d30b035af989fed0d502176e
LinuxLinux5.17
SiemensSIMATIC CN 4100< V5.0

References

Timeline

Published
Sep 5, 2025
Last modified
Nov 5, 2026
NVD status
Modified

Related CVEs from 2025

CVE-2025-397027.0In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: Fix MAC comparison to be constant-time To prevent timing attCVE-2025-397035.5In the Linux kernel, the following vulnerability has been resolved: net, hsr: reject HSR frame if skb can't hold tag Receiving HSR frame wCVE-2025-397045.5In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Fix stack protector issue in send_ipi_data() Function CVE-2025-397055.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix a Null pointer dereference vulnerability [Why] A CVE-2025-397065.5In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Destroy KFD debugfs after destroy KFD wq Since KFD proc coCVE-2025-397075.5In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: check if hubbub is NULL in debugfs/amdgpu_dm_capabilities CVE-2025-397085.5In the Linux kernel, the following vulnerability has been resolved: media: iris: Fix NULL pointer dereference A warning reported by smatchCVE-2025-397095.5In the Linux kernel, the following vulnerability has been resolved: media: venus: protect against spurious interrupts during probe Make suCVE-2025-39719.8A vulnerability classified as critical was found in PHPGurukul COVID19 Testing Management System 1.0. Affected by this vulnerability is an uCVE-2025-397107.1In the Linux kernel, the following vulnerability has been resolved: media: venus: Add a check for packet size after reading from shared memCVE-2025-397117.8In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() cCVE-2025-397125.5In the Linux kernel, the following vulnerability has been resolved: media: mt9m114: Fix deadlock in get_frame_interval/set_frame_interval
CVE-2025-39701: High severity, CVSS 7.8 | Vulnix