Null Pointer Dereference in Linux Kernel Affecting RISC-V IOMMU

CVE-2025-39699

What is CVE-2025-39699?

The Linux kernel contains a vulnerability in the RISC-V IOMMU subsystem where the function riscv_iommu_iova_to_phys() does not correctly handle NULL returns from riscv_iommu_pte_fetch(). This oversight can lead to a NULL pointer dereference, potentially destabilizing the system or causing unexpected behavior. The vulnerability has been addressed by implementing checks to prevent the NULL deref and by refining the validation process for the page table entries (PTE).

References