---
id: CVE-2025-39701
title: 'ACPI: pfr_update: Fix the driver update version check'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  ACPI: pfr_update: Fix the driver update version check

  The security-version-number check should be used rather
  than the runtime version check for driver updates.

  Other…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 0db89fa243e5edc5de38c88b369e4c3755c5fb74 <
    79300ff532bccbbf654992c7c0863b49a6c3973c
  - >-
    Linux >= 0db89fa243e5edc5de38c88b369e4c3755c5fb74 <
    cf0a88124e357bffda487cbf3cb612bb97eb97e4
  - >-
    Linux >= 0db89fa243e5edc5de38c88b369e4c3755c5fb74 <
    b00219888c11519ef75d988fa8a780da68ff568e
  - >-
    Linux >= 0db89fa243e5edc5de38c88b369e4c3755c5fb74 <
    908094681f645d3a78e18ef90561a97029e2df7b
  - >-
    Linux >= 0db89fa243e5edc5de38c88b369e4c3755c5fb74 <
    8151320c747efb22d30b035af989fed0d502176e
  - Linux 5.17
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T21:08:37.627885Z'
published: '2025-09-05'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T21:12:55.306Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-39701'
references:
  - url: 'https://git.kernel.org/stable/c/79300ff532bccbbf654992c7c0863b49a6c3973c'
  - url: 'https://git.kernel.org/stable/c/cf0a88124e357bffda487cbf3cb612bb97eb97e4'
  - url: 'https://git.kernel.org/stable/c/b00219888c11519ef75d988fa8a780da68ff568e'
  - url: 'https://git.kernel.org/stable/c/908094681f645d3a78e18ef90561a97029e2df7b'
  - url: 'https://git.kernel.org/stable/c/8151320c747efb22d30b035af989fed0d502176e'
tags:
  - cve.org
epss: 0.00197
epssPercentile: 0.09467
ingestedAt: '2026-11-05T22:38:32.020Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

ACPI: pfr_update: Fix the driver update version check

The security-version-number check should be used rather
than the runtime version check for driver updates.

Otherwise, the firmware update would fail when the update binary had
a lower runtime version number than the current one.

[ rjw: Changelog edits ]

## Affected

- `Linux >= 0db89fa243e5edc5de38c88b369e4c3755c5fb74 < 79300ff532bccbbf654992c7c0863b49a6c3973c`
- `Linux >= 0db89fa243e5edc5de38c88b369e4c3755c5fb74 < cf0a88124e357bffda487cbf3cb612bb97eb97e4`
- `Linux >= 0db89fa243e5edc5de38c88b369e4c3755c5fb74 < b00219888c11519ef75d988fa8a780da68ff568e`
- `Linux >= 0db89fa243e5edc5de38c88b369e4c3755c5fb74 < 908094681f645d3a78e18ef90561a97029e2df7b`
- `Linux >= 0db89fa243e5edc5de38c88b369e4c3755c5fb74 < 8151320c747efb22d30b035af989fed0d502176e`
- `Linux 5.17`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.