Kernel Vulnerability in PCI System Affecting RZ/G3S Host Controller

CVE-2025-40076

What is CVE-2025-40076?

A vulnerability in the Linux kernel PCI subsystem has been identified, specifically affecting the rcar-host driver. The flaw arises when the MSI parent IRQ domain is improperly referenced, leading to a NULL pointer dereference during IRQ handling. This issue emerged during the transition to the msi_create_parent_irq_domain function, where inadequate testing on specific hardware configurations left the problem unreported. Successfully exploiting this vulnerability could allow an attacker to disrupt system functionality.

References