NetSight
IP …
medium5.5

CVE-2025-39920

In the Linux kernel, the following vulnerability has been resolved: pcmcia: Add error handling for add_interval() in do_validate_mem() In the do_validate_mem()…

Impact

In the Linux kernel, the following vulnerability has been resolved: pcmcia: Add error handling for add_interval() in do_validate_mem() In the do_validate_mem(), the call to add_interval() does not handle errors. If kmalloc() fails in add_interval(), it could result in a null pointer being inserted into the linked list, leading to illegal memory access when sub_interval() is called next. This patch adds an error handling for the add_interval(). If add_interval() returns an error, the function will return early with the error code.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.34 before 5.4.299
from 5.5 before 5.10.243
from 5.11 before 5.15.192
from 5.16 before 6.1.151
from 6.2 before 6.6.105
from 6.7 before 6.12.46
DebianDebian Linux
Version 11.0

Weakness classification

CWE-476

References