CVE-2025-39701
kernel: ACPI: pfr_update: Fix the driver update version check
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 5, 2025
Updated · June 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
ACPI: pfr_update: Fix the driver update version check
The security-version-number check should be used rather than the runtime version check for driver updates.
Otherwise, the firmware update would fail when the update binary had a lower runtime version number than the current one.
[ rjw: Changelog edits ]
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-1025 · Comparison Using Wrong Factors