Segmentation Fault in Linux Kernel Affecting Intel LPMD Tool

CVE-2025-21840

Summary

A vulnerability in the Linux kernel affects the intel-lpmd tool, which utilizes the THERMAL_GENL_ATTR_CPU_CAPABILITY attribute to receive HFI events. This issue was introduced due to a modification in the raw value of the attribute after a particular commit, leading to unforeseen segmentation faults when interacting with userspace components. To mitigate this risk, adjustments have been proposed to ensure that the newly introduced attributes do not disrupt existing thermal netlink attributes, maintaining stability for userspace application functionality.

References