CVE-2025-39684

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a kernel-infoleak issue in the do insn ioctl() and do insnlist ioctl() functions. A kernel buffer allocated to hold insn->n samples may not be fully initialized before data is copied to user space, leading to an information leak. This occurs when instruction handlers do not fill the entire insn->n samples, leaving uninitialized kernel data to be read by user space. Specific culprits include insn rw emulate bits() and vm80xx ai insn read().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.