CVE-2025-39781
NoneCVSS
—
EPSS
0.1%
Published
Sep 11, 2025
CISA due date
—
Cloudanix analysis
Developers removed an unneeded warning message that sometimes appeared during memory operations on certain older computer hardware.
- Exploitation
- Other
- Attacker needs
- Other
- Complexity
- Theoretical
- Impact
- Other
- Component
- OS kernel
- Class
- Other
- Remediation
- Patch
- Effort
- Low
- Patch risk
- None
What it actually does
Removes an occasionally triggering WARN_ON_ONCE() call in the PA-RISC flush_cache_vmap function during virtual memory mapping operations in the Linux kernel.
Why it matters to the business
Spurious kernel warnings on affected PA-RISC hardware can consume unnecessary administrator time reviewing logs; no security exposure or service disruption results from the warning.
How an attack unfolds
No exploitation is possible; the change resolves a non-security logging issue rather than a code path that could be abused for unauthorized access or privilege escalation.
How to fix it
Update the Linux kernel to version 6.6.103 or apply commit 69cf90e5aa50fe3cb0c1a63cabc4761db44b0035; apply the corresponding fixed versions (0) for the listed MinimOS packages.
How to confirm the fix worked
Confirm the running kernel reports version 6.6.103 or later and inspect the flush_cache_vmap source to verify removal of the WARN_ON_ONCE call.
How to detect it
No active exploitation indicators exist; historical kernel logs may be reviewed for the original warning string if needed for auditing purposes.
What your security team should do
- Apply the kernel update on any PA-RISC systems running affected versions.
- Review kernel log monitoring rules to suppress or ignore the now-removed warning if still present in legacy environments.
The record
In the Linux kernel, the following vulnerability has been resolved: parisc: Drop WARN_ON_ONCE() from flush_cache_vmap I have observed warning to occassionally trigger.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | linux | 0 | No fix |
| Debian:12 | linux | 0 | No fix |
| Debian:13 | linux | 0 | No fix |
| Debian:14 | linux | 0 | No fix |
| Debian:14 | linux | 0 | 6.16.5-1 |
| Linux | Kernel | 0 | 6.6.103 |
Related vulnerabilities
- CVE-2025-39885 In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix recursive… Also affects linux
- CVE-2025-39883 In the Linux kernel, the following vulnerability has been resolved: mm/memory-failure… Also affects linux
- CVE-2025-39876 In the Linux kernel, the following vulnerability has been resolved: net: fec: Fix… Also affects linux
- CVE-2025-39869 In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: edma… Also affects linux
- CVE-2025-39873 In the Linux kernel, the following vulnerability has been resolved: can: xilinx_can… Also affects linux
- CVE-2025-39863 In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix… Also affects linux
- CVE-2025-39865 In the Linux kernel, the following vulnerability has been resolved: tee: fix NULL pointer… Also affects linux
- CVE-2025-39866 In the Linux kernel, the following vulnerability has been resolved: fs: writeback: fix… Also affects linux