Riskcovery

CVE-2025-39701

ACPI: pfr_update: Fix the driver update version check

State
Published
Severity
Not scored
Published
Sep 5, 2025
Updated
May 12, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ACPI: pfr_update: Fix the driver update version check

The security-version-number check should be used rather than the runtime version check for driver updates.

Otherwise, the firmware update would fail when the update binary had a lower runtime version number than the current one.

[ rjw: Changelog edits ]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 0db89fa243e5edc5de38c88b369e4c3755c5fb74 to before 79300ff532bccbbf654992c7c0863b49a6c3973cAffected
  • 0db89fa243e5edc5de38c88b369e4c3755c5fb74 to before cf0a88124e357bffda487cbf3cb612bb97eb97e4Affected
  • 0db89fa243e5edc5de38c88b369e4c3755c5fb74 to before b00219888c11519ef75d988fa8a780da68ff568eAffected
  • 0db89fa243e5edc5de38c88b369e4c3755c5fb74 to before 908094681f645d3a78e18ef90561a97029e2df7bAffected
  • 0db89fa243e5edc5de38c88b369e4c3755c5fb74 to before 8151320c747efb22d30b035af989fed0d502176eAffected
LinuxLinux
  • 5.17Affected
  • before 5.17Not affected
  • 6.1.149 through 6.1.*Not affected
  • 6.6.103 through 6.6.*Not affected
  • 6.12.44 through 6.12.*Not affected
  • 6.16.4 through 6.16.*Not affected
  • 6.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.