Vulnerability in Linux kernel affects firmware update processes

CVE-2025-39701

What is CVE-2025-39701?

A vulnerability in the Linux kernel's ACPI component has been identified, which affects the driver update version check mechanism. When a firmware update is executed, the current implementation relies on runtime version checks, which can lead to update failures if the update binary has a lower runtime version number. This misalignment poses risks in ensuring firmware integrity and operational consistency, potentially exposing systems to further vulnerabilities.

References