---
id: CVE-2025-39794
title: 'ARM: tegra: Use I/O memcpy to write to IRAM'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  ARM: tegra: Use I/O memcpy to write to IRAM

  Kasan crashes the kernel trying to check boundaries when using the
  normal memcpy.
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= b36ab9754efbd7429d214b3b03dc9843882571bd <
    b28c1a14accc79ead1e87bbdae53309da60be1e7
  - >-
    Linux >= b36ab9754efbd7429d214b3b03dc9843882571bd <
    75a3bdfeed2f129a2c7d9fd7779382b78e35b014
  - >-
    Linux >= b36ab9754efbd7429d214b3b03dc9843882571bd <
    2499b0ac908eefbb8a217aae609b7a5b5174f330
  - >-
    Linux >= b36ab9754efbd7429d214b3b03dc9843882571bd <
    387435f4833f97aabfd74434ee526e31e8a626ea
  - >-
    Linux >= b36ab9754efbd7429d214b3b03dc9843882571bd <
    46b3a7a3a36d5833f14914d1b95c69d28c6a76d6
  - >-
    Linux >= b36ab9754efbd7429d214b3b03dc9843882571bd <
    9b0b3b5e5cae95e09bf0ae4a9bcb58d9b6d57f87
  - >-
    Linux >= b36ab9754efbd7429d214b3b03dc9843882571bd <
    96d6605bf0561d6e568b1dd9265a0f73b5b94f51
  - >-
    Linux >= b36ab9754efbd7429d214b3b03dc9843882571bd <
    30ef45b89a5961cdecf907ecff1ef3374d1de510
  - >-
    Linux >= b36ab9754efbd7429d214b3b03dc9843882571bd <
    398e67e0f5ae04b29bcc9cbf342e339fe9d3f6f1
  - Linux 3.4
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T21:11:32.774596Z'
published: '2025-09-12'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T21:12:58.275Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-39794'
references:
  - url: 'https://git.kernel.org/stable/c/b28c1a14accc79ead1e87bbdae53309da60be1e7'
  - url: 'https://git.kernel.org/stable/c/75a3bdfeed2f129a2c7d9fd7779382b78e35b014'
  - url: 'https://git.kernel.org/stable/c/2499b0ac908eefbb8a217aae609b7a5b5174f330'
  - url: 'https://git.kernel.org/stable/c/387435f4833f97aabfd74434ee526e31e8a626ea'
  - url: 'https://git.kernel.org/stable/c/46b3a7a3a36d5833f14914d1b95c69d28c6a76d6'
  - url: 'https://git.kernel.org/stable/c/9b0b3b5e5cae95e09bf0ae4a9bcb58d9b6d57f87'
  - url: 'https://git.kernel.org/stable/c/96d6605bf0561d6e568b1dd9265a0f73b5b94f51'
  - url: 'https://git.kernel.org/stable/c/30ef45b89a5961cdecf907ecff1ef3374d1de510'
  - url: 'https://git.kernel.org/stable/c/398e67e0f5ae04b29bcc9cbf342e339fe9d3f6f1'
tags:
  - cve.org
epss: 0.00164
epssPercentile: 0.05619
ingestedAt: '2026-11-05T22:38:32.028Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

ARM: tegra: Use I/O memcpy to write to IRAM

Kasan crashes the kernel trying to check boundaries when using the
normal memcpy.

## Affected

- `Linux >= b36ab9754efbd7429d214b3b03dc9843882571bd < b28c1a14accc79ead1e87bbdae53309da60be1e7`
- `Linux >= b36ab9754efbd7429d214b3b03dc9843882571bd < 75a3bdfeed2f129a2c7d9fd7779382b78e35b014`
- `Linux >= b36ab9754efbd7429d214b3b03dc9843882571bd < 2499b0ac908eefbb8a217aae609b7a5b5174f330`
- `Linux >= b36ab9754efbd7429d214b3b03dc9843882571bd < 387435f4833f97aabfd74434ee526e31e8a626ea`
- `Linux >= b36ab9754efbd7429d214b3b03dc9843882571bd < 46b3a7a3a36d5833f14914d1b95c69d28c6a76d6`
- `Linux >= b36ab9754efbd7429d214b3b03dc9843882571bd < 9b0b3b5e5cae95e09bf0ae4a9bcb58d9b6d57f87`
- `Linux >= b36ab9754efbd7429d214b3b03dc9843882571bd < 96d6605bf0561d6e568b1dd9265a0f73b5b94f51`
- `Linux >= b36ab9754efbd7429d214b3b03dc9843882571bd < 30ef45b89a5961cdecf907ecff1ef3374d1de510`
- `Linux >= b36ab9754efbd7429d214b3b03dc9843882571bd < 398e67e0f5ae04b29bcc9cbf342e339fe9d3f6f1`
- `Linux 3.4`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.