CVE-2025-39920

pcmcia: Add error handling for add_interval() in do_validate_mem()

State: Published
Severity: Not scored
Published: Oct 1, 2025
Updated: May 11, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

pcmcia: Add error handling for add_interval() in do_validate_mem()

In the do_validate_mem(), the call to add_interval() does not handle errors. If kmalloc() fails in add_interval(), it could result in a null pointer being inserted into the linked list, leading to illegal memory access when sub_interval() is called next.

This patch adds an error handling for the add_interval(). If add_interval() returns an error, the function will return early with the error code.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	7b4884ca8853a638df0eb5d251d80d67777b8b1a to before 5b60ed401b47897352c520bc724c85aa908dedccAffected 7b4884ca8853a638df0eb5d251d80d67777b8b1a to before ae184024ef31423e5beb44cf4f52999bbcf2fe5bAffected 7b4884ca8853a638df0eb5d251d80d67777b8b1a to before 85be7ef8c8e792a414940a38d94565dd48d2f236Affected 7b4884ca8853a638df0eb5d251d80d67777b8b1a to before 06b26e3099207c94b3d1be8565aedc6edc4f0a60Affected 7b4884ca8853a638df0eb5d251d80d67777b8b1a to before 8699358b6ac99b8ccc97ed9e6e3669ef8958ef7bAffected 7b4884ca8853a638df0eb5d251d80d67777b8b1a to before 289b58f8ff3198d091074a751d6b8f6827726f3eAffected 7b4884ca8853a638df0eb5d251d80d67777b8b1a to before 369bf6e241506583f4ee7593c53b92e5a9f271b4Affected 7b4884ca8853a638df0eb5d251d80d67777b8b1a to before 4a81f78caa53e0633cf311ca1526377d9bff7479Affected
LinuxLinux	2.6.34Affected before 2.6.34Not affected 5.4.299 through 5.4.Not affected 5.10.243 through 5.10.Not affected 5.15.192 through 5.15.Not affected 6.1.151 through 6.1.Not affected 6.6.105 through 6.6.Not affected 6.12.46 through 6.12.Not affected 6.16.6 through 6.16.*Not affected 6.17 and laterNot affected

Product

Versions

LinuxLinux

7b4884ca8853a638df0eb5d251d80d67777b8b1a to before 5b60ed401b47897352c520bc724c85aa908dedccAffected
7b4884ca8853a638df0eb5d251d80d67777b8b1a to before ae184024ef31423e5beb44cf4f52999bbcf2fe5bAffected
7b4884ca8853a638df0eb5d251d80d67777b8b1a to before 85be7ef8c8e792a414940a38d94565dd48d2f236Affected
7b4884ca8853a638df0eb5d251d80d67777b8b1a to before 06b26e3099207c94b3d1be8565aedc6edc4f0a60Affected
7b4884ca8853a638df0eb5d251d80d67777b8b1a to before 8699358b6ac99b8ccc97ed9e6e3669ef8958ef7bAffected
7b4884ca8853a638df0eb5d251d80d67777b8b1a to before 289b58f8ff3198d091074a751d6b8f6827726f3eAffected
7b4884ca8853a638df0eb5d251d80d67777b8b1a to before 369bf6e241506583f4ee7593c53b92e5a9f271b4Affected
7b4884ca8853a638df0eb5d251d80d67777b8b1a to before 4a81f78caa53e0633cf311ca1526377d9bff7479Affected

LinuxLinux

2.6.34Affected
before 2.6.34Not affected
5.4.299 through 5.4.*Not affected
5.10.243 through 5.10.*Not affected
5.15.192 through 5.15.*Not affected
6.1.151 through 6.1.*Not affected
6.6.105 through 6.6.*Not affected
6.12.46 through 6.12.*Not affected
6.16.6 through 6.16.*Not affected
6.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.