Linux Kernel Vulnerability: NULL Pointer Dereference in ANX7625 Driver

CVE-2025-39934

What is CVE-2025-39934?

A vulnerability exists in the Linux kernel's ANX7625 display bridge driver that may lead to a NULL pointer dereference. This issue arises if an interrupt is triggered before the necessary resource initialization is completed, allowing the interrupt handler or worker to access uninitialized data. This could particularly affect the I2C tcpc_client device, posing potential instability and security risks.

References