CVE-2025-39714

HIGH

In the Linux kernel, the following vulnerability has been resolved: media: usbtv: Lock resolution while streaming When an program is streaming (ffplay) and another program (qv4l2) changes the TV standard from NTSC to PAL, the kernel crashes due to trying to copy to unmapped memory. Changing from NTSC to PAL increases the resolution in the usbtv struct, but the video plane buffer isn't adjusted, so it overflows. [hverkuil: call vb2_is_busy instead of vb2_is_streaming]

CVSS v3.1 Score

7.8
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Published: 9/5/2025Modified: 10/19/2026

Related Intelligence (1)

CRITICALData Breach

Siemens SIMATIC

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-134-10.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>SIMATIC CN 4100 contains multiple vulnerabilities which could potentially lead to a compromise in availability, integrity and confidentiality. Siemens has released a new version for SIMATIC CN 4100 and recommends to update to the late

CVE-2024-47704CVE-2024-57924
CISA Advisories

References (11)

https://git.kernel.org/stable/c/3d83d0b5ae5045a7a246ed116b5f6c688a12f9e9Patchhttps://git.kernel.org/stable/c/5427dda195d6baf23028196fd55a0c90f66ffa61Patchhttps://git.kernel.org/stable/c/7e40e0bb778907b2441bff68d73c3eb6b6cd319fPatchhttps://git.kernel.org/stable/c/9f886d21e235c4bd038cb20f6696084304197ab3Patchhttps://git.kernel.org/stable/c/c35e7c7a004ef379a1ae7c7486d4829419acad1dPatchhttps://git.kernel.org/stable/c/c3d75524e10021aa5c223d94da4996640aed46c0Patchhttps://git.kernel.org/stable/c/ee7bade8b9244834229b12b6e1e724939bedd484Patchhttps://git.kernel.org/stable/c/ef9b3c22405192afaa279077ddd45a51db90b83dPatchhttps://lists.debian.org/debian-lts-announce/2025/10/msg00007.htmlMailing ListThird Party Advisoryhttps://lists.debian.org/debian-lts-announce/2025/10/msg00008.htmlMailing ListThird Party Advisoryhttps://cert-portal.siemens.com/productcert/html/ssa-032379.html