User Read Access Vulnerability in Linux Kernel by Linux Foundation

CVE-2025-39716

What is CVE-2025-39716?

A vulnerability has been identified in the Linux kernel that affects how user read access is managed. Specifically, the __get_user() function does not trigger read access interruptions due to the privilege level at which the kernel operates. This oversight allows for potential unauthorized access to read-protected addresses through system calls. To mitigate this risk, modifications have been made to ensure that read access rights are probed correctly at privilege level 3, preventing unauthorized access attempts and enhancing overall system security.

References