Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2025-39699

iommu/riscv: prevent NULL deref in iova_to_phys

Description

In the Linux kernel, the following vulnerability has been resolved: iommu/riscv: prevent NULL deref in iova_to_phys The riscv_iommu_pte_fetch() function returns either NULL for unmapped/never-mapped iova, or a valid leaf pte pointer that requires no further validation. riscv_iommu_iova_to_phys() failed to handle NULL returns. Prevent null pointer dereference in riscv_iommu_iova_to_phys(), and remove the pte validation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 488ffbf181718b9ad8c1838cb249d60973e78eda to < 220c491490255b656672bb572b18460cd9155926affected
  • 488ffbf181718b9ad8c1838cb249d60973e78eda to < 99d4d1a070870aa08163af8ce0522992b7f35d8caffected

Linux Linux

Default version status: affected

  • 6.13affected
  • 0 to < 6.13unaffected
  • 6.16.4 to ≤ 6.16.*unaffected
  • 6.17 to ≤ *unaffected

References