Memory Access Issues in the Linux Kernel Affecting Resource Management

CVE-2025-21804

Summary

A vulnerability in the Linux kernel's PCI subsystem could result from the misuse of a string variable in the rcar_pcie_parse_outbound_ranges() function. This failure to correctly pass a dynamically computed resource name to the devm_request_mem_region() macro can lead to various undefined behaviors, including unpredictable errors when accessing the /proc/iomem output. In rare circumstances, a lack of a NULL-terminator in the string may cause system crashes by accessing unmapped memory above the stack. This is critical for system stability and requires prompt mitigation through the latest patches.

References