Memory Management Flaw in Linux Kernel Affects MHI Host

CVE-2025-39790

What is CVE-2025-39790?

The vulnerability in the Linux kernel affects the MHI host, specifically how completion events from remote devices are processed. When a completion event contains a pointer to a Transfer Request Element (TRE), the host relies on this pointer to process events. Issues arise when the event is sent for a transaction that is not synchronized with the host's current read pointer, leading the host to potentially access stale data. If this stale data is freed while still being referenced, it results in a double-free condition, which can be exploited to compromise system stability or security. This vulnerability highlights the importance of ensuring proper synchronization between the host and device events, particularly when multiple elements are involved.

References