Riskcovery

CVE-2025-39774

iio: adc: rzg2l_adc: Set driver data before enabling runtime PM

State
Published
Severity
Not scored
Published
Sep 11, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

iio: adc: rzg2l_adc: Set driver data before enabling runtime PM

When stress-testing the system by repeatedly unbinding and binding the ADC device in a loop, and the ADC is a supplier for another device (e.g., a thermal hardware block that reads temperature through the ADC), it may happen that the ADC device is runtime-resumed immediately after runtime PM is enabled, triggered by its consumer. At this point, since drvdata is not yet set and the driver's runtime PM callbacks rely on it, a crash can occur. To avoid this, set drvdata just after it was allocated.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 89ee8174e8c8db0efc75b26f2307114b38d61354 to before e7ce902db071a7b3e696a43d6e14ca57360deee6Affected
  • 89ee8174e8c8db0efc75b26f2307114b38d61354 to before c69e13965f26b8058f538ea8bdbd2d7718cf1fbeAffected
LinuxLinux
  • 6.14Affected
  • before 6.14Not affected
  • 6.16.4 through 6.16.*Not affected
  • 6.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.