CVE-2025-39708: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: media: iris: Fix NULL pointer dereference A warning reported by smatch indicated a possible null pointer dereference where one of the arguments to API "iris_hfi_gen2_handle_system_error" could sometimes be null. To fix this, add a check to validate that the argument passed is not null before accessing its members.

Affected products

• Linux Linux Kernel: from 6.15, before 6.16.4 (fixed in 6.16.4)

Published 2025-09-05. Last modified 2026-06-17.