---
cve: "CVE-2025-39934"
severity: "LOW"
cvss: 3.1
epss: "0.1%"
vendor: "Linux"
kev: false
exploited: false
published: "2025-10-04 08:15:46"
tags: [cve, security, low]
source: tsecurity.de CVE-Dossier
exported: "2026-09-21T14:50:59+02:00"
---

# CVE-2025-39934

> 3.1 LOW

## Beschreibung

In the Linux kernel, the following vulnerability has been resolved:

drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ

If the interrupt occurs before resource initialization is complete, the
interrupt handler/worker may access uninitialized data such as the I2C
tcpc_client device, potentially leading to NULL pointer dereference.

## Patch verfügbar (OSV)

- Kernel ≥ 5.15.194
- Kernel ≥ 6.1.154
- Kernel ≥ 6.6.108
- Kernel ≥ 6.12.49
- Kernel ≥ 6.16.9

## Referenzen

- <https://git.kernel.org/stable/c/51a501e990a353a4f15da6bab295b28e5d118f64>
- <https://git.kernel.org/stable/c/f9a089d0a6d537d0f2061c8a37a7de535ce0310e>
- <https://git.kernel.org/stable/c/15a77e1ab0a994d69b471c76b8d01117128dda26>
- <https://git.kernel.org/stable/c/0da73f7827691a5e2265b110d5fe12f29535ec92>
- <https://git.kernel.org/stable/c/1a7ea294d57fb61485d11b3f2241d631d73025cb>
- <https://git.kernel.org/stable/c/a10f910c77f280327b481e77eab909934ec508f0>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2025-39934) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_