CVE-2025-39716

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the get user() function related to user read access. Due to the implementation of read access support, read access interruptions are not triggered at privilege level 0, allowing user code to potentially access read-protected addresses via system calls. The issue is resolved by probing read access rights at privilege level 3 and setting gu err to -EFAULT if access is not allowed. The cmpiclr instruction performs a 32-bit compare.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.