{"id":"CVE-2025-40089","state":"PUBLISHED","title":"cxl/features: Add check for no entries in cxl_feature_info","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ncxl/features: Add check for no entries in cxl_feature_info\n\ncxl EDAC calls cxl_feature_info() to get the feature information and\nif the hardware has no Features support, cxlfs may be passed in as\nNULL.\n\n[   51.957498] BUG: kernel NULL pointer dereference, address: 0000000000000008\n[   51.965571] #PF: supervisor read access in kernel mode\n[   51.971559] #PF: error_code(0x0000) - not-present page\n[   51.977542] PGD 17e4f6067 P4D 0\n[   51.981384] Oops: Oops: 0000 [#1] SMP NOPTI\n[   51.986300] CPU: 49 UID: 0 PID: 3782 Comm: systemd-udevd Not tainted 6.17.0dj\ntest+ #64 PREEMPT(voluntary)\n[   51.997355] Hardware name: <removed>\n[   52.009790] RIP: 0010:cxl_feature_info+0xa/0x80 [cxl_core]\n\nAdd a check for cxlfs before dereferencing it and return -EOPNOTSUPP if\nthere is no cxlfs created due to no hardware support.","publishedAt":"2025-10-30T09:47:57.990Z","updatedAt":"2026-05-11T21:42:18.011Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"eb5dfcb9e36d0e46089fec777d911313c1876fa3","status":"affected","lessThan":"b8a69e3b1a460bf5d96dd53cbd121aa2cd346886","versionType":"git"},{"version":"eb5dfcb9e36d0e46089fec777d911313c1876fa3","status":"affected","lessThan":"a375246fcf2bbdaeb1df7fa7ee5a8b884a89085e","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/cxl/core/features.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"6.15","status":"affected"},{"version":"0","status":"unaffected","lessThan":"6.15","versionType":"semver"},{"version":"6.17.5","status":"unaffected","lessThanOrEqual":"6.17.*","versionType":"semver"},{"version":"6.18","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/cxl/core/features.c"]}],"references":["https://git.kernel.org/stable/c/b8a69e3b1a460bf5d96dd53cbd121aa2cd346886","https://git.kernel.org/stable/c/a375246fcf2bbdaeb1df7fa7ee5a8b884a89085e"],"weaknesses":[],"ingestedAt":"2026-10-29T20:09:09.358Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/40xxx/CVE-2025-40089.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-40089","state":"PUBLISHED","datePublished":"2025-10-30T09:47:57.990Z","dateUpdated":"2026-05-11T21:42:18.011Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2025-04-16T07:20:57.162Z"},"containers":{"cna":{"title":"cxl/features: Add check for no entries in cxl_feature_info","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\ncxl/features: Add check for no entries in cxl_feature_info\n\ncxl EDAC calls cxl_feature_info() to get the feature information and\nif the hardware has no Features support, cxlfs may be passed in as\nNULL.\n\n[   51.957498] BUG: kernel NULL pointer dereference, address: 0000000000000008\n[   51.965571] #PF: supervisor read access in kernel mode\n[   51.971559] #PF: error_code(0x0000) - not-present page\n[   51.977542] PGD 17e4f6067 P4D 0\n[   51.981384] Oops: Oops: 0000 [#1] SMP NOPTI\n[   51.986300] CPU: 49 UID: 0 PID: 3782 Comm: systemd-udevd Not tainted 6.17.0dj\ntest+ #64 PREEMPT(voluntary)\n[   51.997355] Hardware name: <removed>\n[   52.009790] RIP: 0010:cxl_feature_info+0xa/0x80 [cxl_core]\n\nAdd a check for cxlfs before dereferencing it and return -EOPNOTSUPP if\nthere is no cxlfs created due to no hardware support."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"eb5dfcb9e36d0e46089fec777d911313c1876fa3","status":"affected","lessThan":"b8a69e3b1a460bf5d96dd53cbd121aa2cd346886","versionType":"git"},{"version":"eb5dfcb9e36d0e46089fec777d911313c1876fa3","status":"affected","lessThan":"a375246fcf2bbdaeb1df7fa7ee5a8b884a89085e","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/cxl/core/features.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"6.15","status":"affected"},{"version":"0","status":"unaffected","lessThan":"6.15","versionType":"semver"},{"version":"6.17.5","status":"unaffected","lessThanOrEqual":"6.17.*","versionType":"semver"},{"version":"6.18","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/cxl/core/features.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/b8a69e3b1a460bf5d96dd53cbd121aa2cd346886"},{"url":"https://git.kernel.org/stable/c/a375246fcf2bbdaeb1df7fa7ee5a8b884a89085e"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-05-11T21:42:18.011Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.15","versionEndExcluding":"6.17.5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.15","versionEndExcluding":"6.18"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}}}}}