{"id":"CVE-2025-39794","title":"ARM: tegra: Use I/O memcpy to write to IRAM","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nARM: tegra: Use I/O memcpy to write to IRAM\n\nKasan crashes the kernel trying to check boundaries when using the\nnormal memcpy.","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= b36ab9754efbd7429d214b3b03dc9843882571bd < b28c1a14accc79ead1e87bbdae53309da60be1e7","Linux >= b36ab9754efbd7429d214b3b03dc9843882571bd < 75a3bdfeed2f129a2c7d9fd7779382b78e35b014","Linux >= b36ab9754efbd7429d214b3b03dc9843882571bd < 2499b0ac908eefbb8a217aae609b7a5b5174f330","Linux >= b36ab9754efbd7429d214b3b03dc9843882571bd < 387435f4833f97aabfd74434ee526e31e8a626ea","Linux >= b36ab9754efbd7429d214b3b03dc9843882571bd < 46b3a7a3a36d5833f14914d1b95c69d28c6a76d6","Linux >= b36ab9754efbd7429d214b3b03dc9843882571bd < 9b0b3b5e5cae95e09bf0ae4a9bcb58d9b6d57f87","Linux >= b36ab9754efbd7429d214b3b03dc9843882571bd < 96d6605bf0561d6e568b1dd9265a0f73b5b94f51","Linux >= b36ab9754efbd7429d214b3b03dc9843882571bd < 30ef45b89a5961cdecf907ecff1ef3374d1de510","Linux >= b36ab9754efbd7429d214b3b03dc9843882571bd < 398e67e0f5ae04b29bcc9cbf342e339fe9d3f6f1","Linux 3.4"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T21:11:32.774596Z"},"published":"2025-09-12","updated":"2026-11-05","sourceUpdated":"2026-11-05T21:12:58.275Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-39794","references":[{"url":"https://git.kernel.org/stable/c/b28c1a14accc79ead1e87bbdae53309da60be1e7"},{"url":"https://git.kernel.org/stable/c/75a3bdfeed2f129a2c7d9fd7779382b78e35b014"},{"url":"https://git.kernel.org/stable/c/2499b0ac908eefbb8a217aae609b7a5b5174f330"},{"url":"https://git.kernel.org/stable/c/387435f4833f97aabfd74434ee526e31e8a626ea"},{"url":"https://git.kernel.org/stable/c/46b3a7a3a36d5833f14914d1b95c69d28c6a76d6"},{"url":"https://git.kernel.org/stable/c/9b0b3b5e5cae95e09bf0ae4a9bcb58d9b6d57f87"},{"url":"https://git.kernel.org/stable/c/96d6605bf0561d6e568b1dd9265a0f73b5b94f51"},{"url":"https://git.kernel.org/stable/c/30ef45b89a5961cdecf907ecff1ef3374d1de510"},{"url":"https://git.kernel.org/stable/c/398e67e0f5ae04b29bcc9cbf342e339fe9d3f6f1"}],"tags":["cve.org"],"epss":0.00164,"epssPercentile":0.05619,"ingestedAt":"2026-11-05T22:38:32.028Z","slug":"CVE-2025-39794","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nARM: tegra: Use I/O memcpy to write to IRAM\n\nKasan crashes the kernel trying to check boundaries when using the\nnormal memcpy.\n\n## Affected\n\n- `Linux >= b36ab9754efbd7429d214b3b03dc9843882571bd < b28c1a14accc79ead1e87bbdae53309da60be1e7`\n- `Linux >= b36ab9754efbd7429d214b3b03dc9843882571bd < 75a3bdfeed2f129a2c7d9fd7779382b78e35b014`\n- `Linux >= b36ab9754efbd7429d214b3b03dc9843882571bd < 2499b0ac908eefbb8a217aae609b7a5b5174f330`\n- `Linux >= b36ab9754efbd7429d214b3b03dc9843882571bd < 387435f4833f97aabfd74434ee526e31e8a626ea`\n- `Linux >= b36ab9754efbd7429d214b3b03dc9843882571bd < 46b3a7a3a36d5833f14914d1b95c69d28c6a76d6`\n- `Linux >= b36ab9754efbd7429d214b3b03dc9843882571bd < 9b0b3b5e5cae95e09bf0ae4a9bcb58d9b6d57f87`\n- `Linux >= b36ab9754efbd7429d214b3b03dc9843882571bd < 96d6605bf0561d6e568b1dd9265a0f73b5b94f51`\n- `Linux >= b36ab9754efbd7429d214b3b03dc9843882571bd < 30ef45b89a5961cdecf907ecff1ef3374d1de510`\n- `Linux >= b36ab9754efbd7429d214b3b03dc9843882571bd < 398e67e0f5ae04b29bcc9cbf342e339fe9d3f6f1`\n- `Linux 3.4`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}