01 Record

CVE-2025-39865

tee: fix NULL pointer dereference in tee_shm_put

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

tee: fix NULL pointer dereference in tee_shm_put

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.16% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 4.9% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-10-19.
Red Hat severity: Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-09-19 15:26Z1 YR AGO

Last updated

2026-05-23 16:00Z5 MO AGO

Reserved

2025-04-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-476NULL Pointer DereferenceBase

Data version

5.2

Document digest

5da5b9a0128a685c1240c1f49356004f7fdd3f6e7061f352ec4fed4fa9e0567f

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxc05d8f66ec3470e5212c4d08c46d6cb5738d600d to < f266188603c34e6e234fb0dfc3185f0ba98d71b7, 492eb7afe858d60408b2da09adc78540c4d16543 to < 4377eac565c297fdfccd2f8e9bf94ee84ff6172f, dfd0743f1d9ea76931510ed150334d571fbab49d to < 25e315bc8ad363bd1194e49062f183ad4011957e, dfd0743f1d9ea76931510ed150334d571fbab49d to < add1ecc8f3ad8df22e3599c5c88d7907cc2a3079, dfd0743f1d9ea76931510ed150334d571fbab49d to < 963fca19fe34c496e04f7dd133b807b76a5434ca, dfd0743f1d9ea76931510ed150334d571fbab49d to < 5e07a4235bb85d9ef664411e4ff4ac34783c18ff, dfd0743f1d9ea76931510ed150334d571fbab49d to < e4a718a3a47e89805c3be9d46a84de1949a98d5d, 3d556a28bbfe34a80b014db49908b0f1bcb1ae80, b4a661b4212b8fac8853ec3b68e4a909dccc88a1, 940e68e57ab69248fabba5889e615305789db8a7, 5.10.89 to < 5.10.243, 5.15.12 to < 5.15.192, 4.14.261 to < 4.15, 4.19.224 to < 4.20, 5.4.170 to < 5.5, 5.16—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/f266188603c34e6e234fb0dfc3185f0ba98d71b7
git.kernel.orghttps://git.kernel.org/stable/c/4377eac565c297fdfccd2f8e9bf94ee84ff6172f
git.kernel.orghttps://git.kernel.org/stable/c/25e315bc8ad363bd1194e49062f183ad4011957e
git.kernel.orghttps://git.kernel.org/stable/c/add1ecc8f3ad8df22e3599c5c88d7907cc2a3079
git.kernel.orghttps://git.kernel.org/stable/c/963fca19fe34c496e04f7dd133b807b76a5434ca
git.kernel.orghttps://git.kernel.org/stable/c/5e07a4235bb85d9ef664411e4ff4ac34783c18ff
git.kernel.orghttps://git.kernel.org/stable/c/e4a718a3a47e89805c3be9d46a84de1949a98d5d
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00007.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-089022.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-032379.html

07 Fixed in

Debian 12

linux
Fixed in 6.1.153-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.48-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.16.6-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.