01 Record

CVE-2025-39995

media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.23% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 14.1% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Deferred. NVD last modified this record on 2026-10-19.
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published: 2025-10-15 07:58Z1 YR AGO
Last updated: 2026-05-11 21:40Z5 MO AGO
Reserved: 2025-04-16
Assigning CNA: Linux
Record state: PUBLISHED
Severity: Not rated by the issuing CNA
CNA CVSS vector: Not published by the issuing CNA
Weaknesses: No CWE assigned
Data version: 5.2
Document digest: 41fdea007d1b6d6d6645bca9c3decbde8ca6943a215f5573fdc039b1ea468538

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxd32d98642de66048f9534a05f3641558e811bbc9 to < 9205fb6e617a1c596d9a9ad2a160ee696e09d520, d32d98642de66048f9534a05f3641558e811bbc9 to < 70913586c717dd25cfbade7a418e92cc9c99398a, d32d98642de66048f9534a05f3641558e811bbc9 to < 663faf1179db9663a3793c75e9bc869358bad910, d32d98642de66048f9534a05f3641558e811bbc9 to < 3d17701c156579969470e58b3a906511f8bc018d, d32d98642de66048f9534a05f3641558e811bbc9 to < 228d06c4cbfc750f1216a3fd91b4693b0766d2f6, d32d98642de66048f9534a05f3641558e811bbc9 to < f92181c0e13cad9671d07b15be695a97fc2534a3, d32d98642de66048f9534a05f3641558e811bbc9 to < f3f3f00bcabbd2ce0a77a2ac7a6797b8646bfd8b, d32d98642de66048f9534a05f3641558e811bbc9 to < 2610617effb4454d2f1c434c011ccb5cc7140711, d32d98642de66048f9534a05f3641558e811bbc9 to < 79d10f4f21a92e459b2276a77be62c59c1502c9d, 4.3—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/9205fb6e617a1c596d9a9ad2a160ee696e09d520
git.kernel.orghttps://git.kernel.org/stable/c/70913586c717dd25cfbade7a418e92cc9c99398a
git.kernel.orghttps://git.kernel.org/stable/c/663faf1179db9663a3793c75e9bc869358bad910
git.kernel.orghttps://git.kernel.org/stable/c/3d17701c156579969470e58b3a906511f8bc018d
git.kernel.orghttps://git.kernel.org/stable/c/228d06c4cbfc750f1216a3fd91b4693b0766d2f6
git.kernel.orghttps://git.kernel.org/stable/c/f92181c0e13cad9671d07b15be695a97fc2534a3
git.kernel.orghttps://git.kernel.org/stable/c/f3f3f00bcabbd2ce0a77a2ac7a6797b8646bfd8b
git.kernel.orghttps://git.kernel.org/stable/c/2610617effb4454d2f1c434c011ccb5cc7140711
git.kernel.orghttps://git.kernel.org/stable/c/79d10f4f21a92e459b2276a77be62c59c1502c9d

07 Fixed in

Debian 12

linux
Fixed in 6.1.158-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.57-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.16.11-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.