Linux Kernel Vulnerability in Media Venus Driver Affecting CH340/CH341

CVE-2025-39709

What is CVE-2025-39709?

A vulnerability exists in the Linux kernel's media venus driver that can lead to a situation where spurious interrupts trigger before the interrupt handler is properly initialized. This occurs specifically during system boot, particularly observed on Rb3Gen2 systems. When the IRQ is registered before the complete setup of the handler via hfi_create(), it may result in a NULL dereference. This flaw underscores the importance of ensuring all components are fully initialized prior to enabling interrupt handling to prevent potential crashes or system instability.

References