CVE-2025-39699

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The riscv iommu pte fetch() function can return a NULL value for unmapped or never-mapped IOVAs. The riscv iommu iova to phys() function did not handle these NULL returns, leading to a potential null pointer dereference. The issue has been resolved by preventing the null pointer dereference and removing pte validation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.