CVE-2025-39713

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description The Linux kernel contains a Time-of-Check to Time-of-Use (TOCTOU) race condition within the rain interrupt() function, specifically related to the rainshadow-cec driver. The issue arises because the buffer full check on rain->buf len occurs before acquiring rain->buf lock. Concurrent interrupt invocations can race, leading to a buffer overflow when both attempt to write to the buffer, incrementing buf len beyond its capacity (DATA SIZE).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.