Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2025-39794— ARM: tegra: Use I/O memcpy to write to IRAM

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于使用普通memcpy写入IRAM时Kasan会尝试检查边界导致内核崩溃。

AI Predicted 5.3 Difficulty: Moderate EPSS 0.16% · P5

Possible ATT&CK Techniques 1 AI

T1059.004 · Unix Shell

Affected Version Matrix 20

VendorProduct Version RangeStatus
Linux Linux b36ab9754efbd7429d214b3b03dc9843882571bd< b28c1a14accc79ead1e87bbdae53309da60be1e7 affected
b36ab9754efbd7429d214b3b03dc9843882571bd< 75a3bdfeed2f129a2c7d9fd7779382b78e35b014 affected
b36ab9754efbd7429d214b3b03dc9843882571bd< 2499b0ac908eefbb8a217aae609b7a5b5174f330 affected
b36ab9754efbd7429d214b3b03dc9843882571bd< 387435f4833f97aabfd74434ee526e31e8a626ea affected
b36ab9754efbd7429d214b3b03dc9843882571bd< 46b3a7a3a36d5833f14914d1b95c69d28c6a76d6 affected
b36ab9754efbd7429d214b3b03dc9843882571bd< 9b0b3b5e5cae95e09bf0ae4a9bcb58d9b6d57f87 affected
b36ab9754efbd7429d214b3b03dc9843882571bd< 96d6605bf0561d6e568b1dd9265a0f73b5b94f51 affected
b36ab9754efbd7429d214b3b03dc9843882571bd< 30ef45b89a5961cdecf907ecff1ef3374d1de510 affected
… +12 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-39794

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
ARM: tegra: Use I/O memcpy to write to IRAM
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: ARM: tegra: Use I/O memcpy to write to IRAM Kasan crashes the kernel trying to check boundaries when using the normal memcpy.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于使用普通memcpy写入IRAM时Kasan会尝试检查边界导致内核崩溃。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux b36ab9754efbd7429d214b3b03dc9843882571bd ~ b28c1a14accc79ead1e87bbdae53309da60be1e7 -
Linux Linux 3.4 -

II. Public POCs for CVE-2025-39794

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-39794

请登录查看更多情报信息。

Same Patch Batch · Linux · 2025-09-12 · 7 CVEs total

CVE-2025-39792 7.8 HIGH dm: Always split write BIOs to zoned device limits
CVE-2025-39793 7.8 HIGH io_uring/memmap: cast nr_pages to size_t before shifting
CVE-2025-39798 7.3 HIGH NFS: Fix the setting of capabilities when automounting a new filesystem
CVE-2025-39795 block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
CVE-2025-39796 net: lapbether: ignore ops-locked netdevs
CVE-2025-39797 xfrm: Duplicate SPI Handling

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2025-39794

No comments yet

Leave a comment