CVE-2025-39719 iio: imu: bno055: fix OOB access of hw_xlate array
Out-of-bounds array access in the BNO055 IMU driver could lead to memory corruption or system crashes.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-39719?
CVE-2025-39719 is a high-severity memory corruption vulnerability in Debian Debian Linux, published on 5 Sep 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
iio: imu: bno055: fix OOB access of hw_xlate array
Fix a potential out-of-bounds array access of the hw_xlate array in bno055.c.
In bno055_get_regmask(), hw_xlate was iterated over the length of the vals array instead of the length of the hw_xlate array. In the case of bno055_gyr_scale, the vals array is larger than the hw_xlate array, so this could result in an out-of-bounds access. In practice, this shouldn't happen though because a match should always be found which breaks out of the for loop before it iterates beyond the end of the hw_xlate array.
By adding a new hw_xlate_len field to the bno055_sysfs_attr, we can be sure we are iterating over the correct length.
Weakness: CWE-125
Which versions are affected by CVE-2025-39719?
It affects 2 products.
Products include Debian Debian Linux, Linux kernel.
How do I fix CVE-2025-39719?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2025-39719 being exploited?
There is no known exploitation of CVE-2025-39719 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as AZL-67022, BELL-CVE-2025-39719, DEBIAN-CVE-2025-39719, GHSA-v6h8-r25q-3mjf, ROOT-OS-DEBIAN-12-CVE-2025-39719, ROOT-OS-DEBIAN-13-CVE-2025-39719 and 2 more.