Vulnerability · Published Sep 5, 2025 · Assigned by Linux
CVE-2025-39694s390/sclp: Fix SCCB present check
High 7.3
In plain English
A high-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 7% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Fix SCCB present check Tracing code called by the SCLP interrupt handler contains early exits if the SCCB address associated with an interrupt is NULL. This check is performed after physical to virtual address translation. If the kernel identity mapping does not start at address zero, the resulting virtual address is never zero, so that the NULL checks won't work. Subsequently this may result in incorrect accesses to the first page of the identity mapping. Fix this by introducing a function that handles the NULL case before address translation.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:9 | kernel | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-64k | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-64k-core | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-64k-debug | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-64k-debug-core | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-64k-debug-devel | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-64k-debug-devel-matched | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-64k-debug-modules | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-64k-debug-modules-core | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-64k-debug-modules-extra | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-64k-devel | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-64k-devel-matched | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-64k-modules | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-64k-modules-core | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-64k-modules-extra | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:10 | kernel-abi-stablelists | 6.12.0-55.37.1.el10_0 | ALSA-2025:16904 |
| AlmaLinux:9 | kernel-abi-stablelists | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-core | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-cross-headers | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-debug | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-debug-core | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-debug-devel | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-debug-devel-matched | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-debug-modules | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-debug-modules-core | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-debug-modules-extra | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-debug-uki-virt | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-devel | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-devel-matched | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:10 | kernel-doc | 6.12.0-55.37.1.el10_0 | ALSA-2025:16904 |
| AlmaLinux:9 | kernel-doc | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-headers | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-modules | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-modules-core | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-modules-extra | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-64k | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-64k-core | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-64k-debug | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-64k-debug-core | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-64k-debug-devel | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-64k-debug-modules | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-64k-debug-modules-core | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-64k-debug-modules-extra | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-64k-devel | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-64k-modules | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-64k-modules-core | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-64k-modules-extra | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-core | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-debug | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-debug-core | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-debug-devel | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-debug-kvm | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-debug-modules | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-debug-modules-core | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-debug-modules-extra | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-devel | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-kvm | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-modules | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-modules-core | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-modules-extra | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-tools | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-tools-libs | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-tools-libs-devel | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-uki-virt | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-uki-virt-addons | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-zfcpdump | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-zfcpdump-core | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-zfcpdump-devel | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-zfcpdump-devel-matched | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-zfcpdump-modules | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-zfcpdump-modules-core | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-zfcpdump-modules-extra | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | libperf | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | perf | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | python3-perf | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | rtla | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | rv | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| Debian:12 | linux | 6.1.153-1 | DEBIAN-CVE-2025-39694 |
| Debian:13 | linux | 6.12.48-1 | DSA-6008-1 |
| Debian:13 | linux | 6.12.48-1 | DEBIAN-CVE-2025-39694 |
| Debian:14 | linux | 6.16.5-1 | DEBIAN-CVE-2025-39694 |
| Rocky Linux:10 | kernel | 0:6.12.0-55.37.1.el10_0 | RLSA-2025:16904 |
| Ubuntu:24.04:LTS | linux | 6.8.0-100.100 | UBUNTU-CVE-2025-39694 |
| Ubuntu:22.04:LTS | linux-allwinner-5.19 | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:24.04:LTS | linux-aws | 6.8.0-1046.49 | UBUNTU-CVE-2025-39694 |
| Ubuntu:22.04:LTS | linux-aws-5.19 | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:24.04:LTS | linux-aws-6.14 | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:22.04:LTS | linux-aws-6.2 | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:22.04:LTS | linux-aws-6.5 | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:22.04:LTS | linux-aws-6.8 | 6.8.0-1046.49~22.04.1 | UBUNTU-CVE-2025-39694 |
| Ubuntu:24.04:LTS | linux-azure | 6.8.0-1046.52 | UBUNTU-CVE-2025-39694 |
| Ubuntu:22.04:LTS | linux-azure-5.19 | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:24.04:LTS | linux-azure-6.11 | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:24.04:LTS | linux-azure-6.14 | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:22.04:LTS | linux-azure-6.2 | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:22.04:LTS | linux-azure-6.5 | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:22.04:LTS | linux-azure-6.8 | 6.8.0-1051.57~22.04.1 | UBUNTU-CVE-2025-39694 |
| Ubuntu:24.04:LTS | linux-azure-fde | 6.8.0-1046.53 | UBUNTU-CVE-2025-39694 |
| Ubuntu:25.10 | linux-azure-fde | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:22.04:LTS | linux-azure-fde-5.19 | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:24.04:LTS | linux-azure-fde-6.14 | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:22.04:LTS | linux-azure-fde-6.2 | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:22.04:LTS | linux-azure-fde-6.8 | 6.8.0-1046.53~22.04.1 | UBUNTU-CVE-2025-39694 |
| Ubuntu:24.04:LTS | linux-azure-nvidia | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:24.04:LTS | linux-azure-nvidia-6.14 | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:24.04:LTS | linux-gcp | 6.8.0-1047.50 | UBUNTU-CVE-2025-39694 |
| Ubuntu:22.04:LTS | linux-gcp-5.19 | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:24.04:LTS | linux-gcp-6.11 | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:24.04:LTS | linux-gcp-6.14 | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:22.04:LTS | linux-gcp-6.2 | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:22.04:LTS | linux-gcp-6.5 | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:22.04:LTS | linux-gcp-6.8 | 6.8.0-1047.50~22.04.2 | UBUNTU-CVE-2025-39694 |
| Ubuntu:24.04:LTS | linux-gke | 6.8.0-1043.48 | UBUNTU-CVE-2025-39694 |
| Ubuntu:24.04:LTS | linux-gkeop | 6.8.0-1030.33 | UBUNTU-CVE-2025-39694 |
| Ubuntu:22.04:LTS | linux-hwe-5.19 | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:24.04:LTS | linux-hwe-6.11 | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:24.04:LTS | linux-hwe-6.14 | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:22.04:LTS | linux-hwe-6.2 | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:22.04:LTS | linux-hwe-6.5 | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:22.04:LTS | linux-hwe-6.8 | 6.8.0-100.100~22.04.1 | UBUNTU-CVE-2025-39694 |
| Ubuntu:24.04:LTS | linux-ibm | 6.8.0-1044.44 | UBUNTU-CVE-2025-39694 |
| Ubuntu:22.04:LTS | linux-ibm-6.8 | 6.8.0-1044.44~22.04.1 | UBUNTU-CVE-2025-39694 |
| Ubuntu:24.04:LTS | linux-intel | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:22.04:LTS | linux-intel-iot-realtime | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:24.04:LTS | linux-lowlatency | 6.8.0-100.100.1 | UBUNTU-CVE-2025-39694 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-5.19 | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:24.04:LTS | linux-lowlatency-hwe-6.11 | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.2 | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.5 | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.8 | 6.8.0-100.100.1~22.04.1 | UBUNTU-CVE-2025-39694 |
| Ubuntu:24.04:LTS | linux-nvidia | 6.8.0-1046.49 | UBUNTU-CVE-2025-39694 |
| Ubuntu:24.04:LTS | linux-nvidia-6.11 | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:22.04:LTS | linux-nvidia-6.2 | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:22.04:LTS | linux-nvidia-6.5 | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:22.04:LTS | linux-nvidia-6.8 | 6.8.0-1046.49~22.04.1 | UBUNTU-CVE-2025-39694 |
| Ubuntu:24.04:LTS | linux-nvidia-lowlatency | 6.8.0-1046.49.1 | UBUNTU-CVE-2025-39694 |
| Ubuntu:24.04:LTS | linux-nvidia-tegra | 6.8.0-1020.20 | UBUNTU-CVE-2025-39694 |
| Ubuntu:22.04:LTS | linux-oem-5.17 | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:22.04:LTS | linux-oem-6.0 | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:22.04:LTS | linux-oem-6.1 | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:24.04:LTS | linux-oem-6.11 | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:24.04:LTS | linux-oem-6.14 | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:22.04:LTS | linux-oem-6.5 | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:24.04:LTS | linux-oem-6.8 | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:24.04:LTS | linux-oracle | 6.8.0-1043.44 | UBUNTU-CVE-2025-39694 |
| Ubuntu:24.04:LTS | linux-oracle-6.14 | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:22.04:LTS | linux-oracle-6.5 | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:22.04:LTS | linux-oracle-6.8 | 6.8.0-1043.44~22.04.1 | UBUNTU-CVE-2025-39694 |
| Ubuntu:24.04:LTS | linux-raspi | 6.8.0-1047.51 | UBUNTU-CVE-2025-39694 |
| Ubuntu:24.04:LTS | linux-raspi-realtime | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:22.04:LTS | linux-realtime | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:24.04:LTS | linux-realtime | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:22.04:LTS | linux-riscv | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:24.04:LTS | linux-riscv | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:22.04:LTS | linux-riscv-5.19 | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:24.04:LTS | linux-riscv-6.14 | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:22.04:LTS | linux-riscv-6.5 | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:22.04:LTS | linux-riscv-6.8 | 6.8.0-100.100~22.04.1 | UBUNTU-CVE-2025-39694 |
| Ubuntu:22.04:LTS | linux-starfive-5.19 | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:22.04:LTS | linux-starfive-6.2 | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:22.04:LTS | linux-starfive-6.5 | no fix listed | UBUNTU-CVE-2025-39694 |
| Ubuntu:24.04:LTS | linux-xilinx | 6.8.0-1023.24 | UBUNTU-CVE-2025-39694 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | ada1da31ce34248bc97ca8f801f2cf6efa378a81 – before aa5073ac1a2a274812f3b04c278992e68ff67cc7ada1da31ce34248bc97ca8f801f2cf6efa378a81 – before 86c2825791c3836a8f77a954b9c5ebe6fab410c5ada1da31ce34248bc97ca8f801f2cf6efa378a81 – before 61605c847599fbfdfafe638607841c7d73719081ada1da31ce34248bc97ca8f801f2cf6efa378a81 – before bf83ae3537359af088d6577812ed93113dfbcb7bada1da31ce34248bc97ca8f801f2cf6efa378a81 – before 430fa71027b6ac9bb0ce5532b8d0676777d4219a |
| Linux | Linux | 5.16 |
References
- https://git.kernel.org/stable/c/aa5073ac1a2a274812f3b04c278992e68ff67cc7
- https://git.kernel.org/stable/c/86c2825791c3836a8f77a954b9c5ebe6fab410c5
- https://git.kernel.org/stable/c/61605c847599fbfdfafe638607841c7d73719081
- https://git.kernel.org/stable/c/bf83ae3537359af088d6577812ed93113dfbcb7b
- https://git.kernel.org/stable/c/430fa71027b6ac9bb0ce5532b8d0676777d4219a
- https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
- https://cert-portal.siemens.com/productcert/html/ssa-032379.html