CVE-2025-39709

In the Linux kernel, the following vulnerability has been resolved:

media: venus: protect against spurious interrupts during probe

Make sure the interrupt handler is initialized before the interrupt is registered.

If the IRQ is registered before hfi_create(), it's possible that an interrupt fires before the handler setup is complete, leading to a NULL dereference.

This error condition has been observed during system boot on Rb3Gen2.

This vulnerability does not impact Red Hat Enterprise Linux or other Red Hat offerings as the affected Qualcomm Venus driver is not enabled in supported kernels. The issue is restricted to specialized Qualcomm multimedia hardware where spurious interrupts during device initialization cause a null pointer dereference, resulting in a denial of service. Because the vulnerable code is not included in Red Hat kernel builds, default installations are not exposed.