In the Linux kernel, the following vulnerability has been resolved: media: usbtv: Lock resolution while streaming When an program is streaming (ffplay) and another program (qv4l2) changes the TV standard from NTSC to PAL, the kernel crashes due to trying to copy to unmapped memory. Changing from NTSC to PAL increases the resolution in the usbtv struct, but the video plane buffer isn't adjusted, so it overflows. [hverkuil: call vb2_is_busy instead of vb2_is_streaming]

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/3d83d0b5ae5045a7a246ed116b5f6c688a12f9e9 cve-icon cve-icon
https://git.kernel.org/stable/c/5427dda195d6baf23028196fd55a0c90f66ffa61 cve-icon cve-icon
https://git.kernel.org/stable/c/7e40e0bb778907b2441bff68d73c3eb6b6cd319f cve-icon cve-icon
https://git.kernel.org/stable/c/9f886d21e235c4bd038cb20f6696084304197ab3 cve-icon cve-icon
https://git.kernel.org/stable/c/c35e7c7a004ef379a1ae7c7486d4829419acad1d cve-icon cve-icon
https://git.kernel.org/stable/c/c3d75524e10021aa5c223d94da4996640aed46c0 cve-icon cve-icon
https://git.kernel.org/stable/c/ee7bade8b9244834229b12b6e1e724939bedd484 cve-icon cve-icon
https://git.kernel.org/stable/c/ef9b3c22405192afaa279077ddd45a51db90b83d cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025090550-CVE-2025-39714-1820@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-39714 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-39714 cve-icon
History

Sat, 06 Sep 2025 09:15:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Vendors & Products Linux
Linux linux Kernel

Sat, 06 Sep 2025 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Fri, 05 Sep 2025 17:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: media: usbtv: Lock resolution while streaming When an program is streaming (ffplay) and another program (qv4l2) changes the TV standard from NTSC to PAL, the kernel crashes due to trying to copy to unmapped memory. Changing from NTSC to PAL increases the resolution in the usbtv struct, but the video plane buffer isn't adjusted, so it overflows. [hverkuil: call vb2_is_busy instead of vb2_is_streaming]
Title media: usbtv: Lock resolution while streaming
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-09-05T17:21:21.435Z

Updated: 2025-09-05T17:21:21.435Z

Reserved: 2025-04-16T07:20:57.117Z

Link: CVE-2025-39714

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-09-05T18:15:48.850

Modified: 2025-09-08T16:25:38.810

Link: CVE-2025-39714

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-09-05T00:00:00Z

Links: CVE-2025-39714 - Bugzilla