CVE-2025-39794

ARM: tegra: Use I/O memcpy to write to IRAM

State: Published
Severity: Not scored
Published: Sep 12, 2025
Updated: May 12, 2026
Reserved: Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ARM: tegra: Use I/O memcpy to write to IRAM

Kasan crashes the kernel trying to check boundaries when using the normal memcpy.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	b36ab9754efbd7429d214b3b03dc9843882571bd to before b28c1a14accc79ead1e87bbdae53309da60be1e7Affected b36ab9754efbd7429d214b3b03dc9843882571bd to before 75a3bdfeed2f129a2c7d9fd7779382b78e35b014Affected b36ab9754efbd7429d214b3b03dc9843882571bd to before 2499b0ac908eefbb8a217aae609b7a5b5174f330Affected b36ab9754efbd7429d214b3b03dc9843882571bd to before 387435f4833f97aabfd74434ee526e31e8a626eaAffected b36ab9754efbd7429d214b3b03dc9843882571bd to before 46b3a7a3a36d5833f14914d1b95c69d28c6a76d6Affected b36ab9754efbd7429d214b3b03dc9843882571bd to before 9b0b3b5e5cae95e09bf0ae4a9bcb58d9b6d57f87Affected b36ab9754efbd7429d214b3b03dc9843882571bd to before 96d6605bf0561d6e568b1dd9265a0f73b5b94f51Affected b36ab9754efbd7429d214b3b03dc9843882571bd to before 30ef45b89a5961cdecf907ecff1ef3374d1de510Affected b36ab9754efbd7429d214b3b03dc9843882571bd to before 398e67e0f5ae04b29bcc9cbf342e339fe9d3f6f1Affected
LinuxLinux	3.4Affected before 3.4Not affected 5.4.297 through 5.4.Not affected 5.10.241 through 5.10.Not affected 5.15.190 through 5.15.Not affected 6.1.149 through 6.1.Not affected 6.6.103 through 6.6.Not affected 6.12.43 through 6.12.Not affected 6.15.11 through 6.15.Not affected 6.16.2 through 6.16.Not affected 6.17 and laterNot affected

Product

Versions

LinuxLinux

b36ab9754efbd7429d214b3b03dc9843882571bd to before b28c1a14accc79ead1e87bbdae53309da60be1e7Affected
b36ab9754efbd7429d214b3b03dc9843882571bd to before 75a3bdfeed2f129a2c7d9fd7779382b78e35b014Affected
b36ab9754efbd7429d214b3b03dc9843882571bd to before 2499b0ac908eefbb8a217aae609b7a5b5174f330Affected
b36ab9754efbd7429d214b3b03dc9843882571bd to before 387435f4833f97aabfd74434ee526e31e8a626eaAffected
b36ab9754efbd7429d214b3b03dc9843882571bd to before 46b3a7a3a36d5833f14914d1b95c69d28c6a76d6Affected
b36ab9754efbd7429d214b3b03dc9843882571bd to before 9b0b3b5e5cae95e09bf0ae4a9bcb58d9b6d57f87Affected
b36ab9754efbd7429d214b3b03dc9843882571bd to before 96d6605bf0561d6e568b1dd9265a0f73b5b94f51Affected
b36ab9754efbd7429d214b3b03dc9843882571bd to before 30ef45b89a5961cdecf907ecff1ef3374d1de510Affected
b36ab9754efbd7429d214b3b03dc9843882571bd to before 398e67e0f5ae04b29bcc9cbf342e339fe9d3f6f1Affected

LinuxLinux

3.4Affected
before 3.4Not affected
5.4.297 through 5.4.*Not affected
5.10.241 through 5.10.*Not affected
5.15.190 through 5.15.*Not affected
6.1.149 through 6.1.*Not affected
6.6.103 through 6.6.*Not affected
6.12.43 through 6.12.*Not affected
6.15.11 through 6.15.*Not affected
6.16.2 through 6.16.*Not affected
6.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.