CVE-2025-39995 media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe

🗓️ 15 Oct 2025 07:58:20Reported by LinuxType

media i2c tc358743 fix use after free from orphan timer during probe.

Reporter	Title	Published	Views	Family All 242
AstraLinux	Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12	13 Jan 202614:01	–	astralinux
BDU FSTEC	The vulnerability of the tc358743_probe() function in the drivers/media/i2c/tc358743.c driver for multimedia devices in the Linux operating system allows a hacker to cause a service failure.	10 Mar 202600:00	–	bdu_fstec
Circl	CVE-2025-39995	15 Oct 202509:05	–	circl
CNNVD	Linux kernel 安全漏洞	15 Oct 202500:00	–	cnnvd
CVE	CVE-2025-39995	15 Oct 202507:58	–	cve
Debian	[SECURITY] [DLA 4379-1] linux-6.1 security update	25 Nov 202517:19	–	debian
Debian	[SECURITY] [DLA 4404-1] linux security update	12 Dec 202513:38	–	debian
Debian	[SECURITY] [DSA 6053-1] linux security update	11 Nov 202520:11	–	debian
Debian CVE	CVE-2025-39995	15 Oct 202507:58	–	debiancve
Tenable Nessus	Debian dla-4379 : linux-config-6.1 - security update	25 Nov 202500:00	–	nessus

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/media/i2c/tc358743.c"
    ],
    "versions": [
      {
        "version": "d32d98642de66048f9534a05f3641558e811bbc9",
        "lessThan": "9205fb6e617a1c596d9a9ad2a160ee696e09d520",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "d32d98642de66048f9534a05f3641558e811bbc9",
        "lessThan": "70913586c717dd25cfbade7a418e92cc9c99398a",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "d32d98642de66048f9534a05f3641558e811bbc9",
        "lessThan": "663faf1179db9663a3793c75e9bc869358bad910",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "d32d98642de66048f9534a05f3641558e811bbc9",
        "lessThan": "3d17701c156579969470e58b3a906511f8bc018d",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "d32d98642de66048f9534a05f3641558e811bbc9",
        "lessThan": "228d06c4cbfc750f1216a3fd91b4693b0766d2f6",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "d32d98642de66048f9534a05f3641558e811bbc9",
        "lessThan": "f92181c0e13cad9671d07b15be695a97fc2534a3",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "d32d98642de66048f9534a05f3641558e811bbc9",
        "lessThan": "f3f3f00bcabbd2ce0a77a2ac7a6797b8646bfd8b",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "d32d98642de66048f9534a05f3641558e811bbc9",
        "lessThan": "2610617effb4454d2f1c434c011ccb5cc7140711",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "d32d98642de66048f9534a05f3641558e811bbc9",
        "lessThan": "79d10f4f21a92e459b2276a77be62c59c1502c9d",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/media/i2c/tc358743.c"
    ],
    "versions": [
      {
        "version": "4.3",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "4.3",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.4.301",
        "lessThanOrEqual": "5.4.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.246",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.195",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.156",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.111",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.52",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.16.11",
        "lessThanOrEqual": "6.16.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.17.1",
        "lessThanOrEqual": "6.17.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/9205fb6e617a1c596d9a9ad2a160ee696e09d520
git	www.git.kernel.org/stable/c/3d17701c156579969470e58b3a906511f8bc018d
git	www.git.kernel.org/stable/c/f92181c0e13cad9671d07b15be695a97fc2534a3
git	www.git.kernel.org/stable/c/79d10f4f21a92e459b2276a77be62c59c1502c9d
git	www.git.kernel.org/stable/c/228d06c4cbfc750f1216a3fd91b4693b0766d2f6
git	www.git.kernel.org/stable/c/663faf1179db9663a3793c75e9bc869358bad910
git	www.git.kernel.org/stable/c/2610617effb4454d2f1c434c011ccb5cc7140711
git	www.git.kernel.org/stable/c/f3f3f00bcabbd2ce0a77a2ac7a6797b8646bfd8b
git	www.git.kernel.org/stable/c/70913586c717dd25cfbade7a418e92cc9c99398a

11 May 2026 21:40Current

EPSS0.00218