SCLP Interrupt Handler Vulnerability in Linux Kernel by IBM

CVE-2025-39694

What is CVE-2025-39694?

A vulnerability exists in the Linux kernel's handling of the SCLP interrupt, where the tracing code allows for potential improper access due to ineffective NULL checks. This issue arises when the SCCB address associated with an interrupt is NULL and the kernel's identity mapping does not start at address zero. Consequently, the virtual address checks may fail, leading to unintended access to memory. A fix has been implemented to introduce a method that addresses NULL cases prior to translating physical addresses, mitigating risks of incorrect memory access.

References