Linux Kernel Vulnerability in cxl Feature Management by Vendor

CVE-2025-40089

What is CVE-2025-40089?

A vulnerability exists in the Linux kernel within cxl feature management, where a NULL pointer dereference can occur if the hardware lacks support for features. Specifically, if the system calls cxl_feature_info() without proper checks when no cxlfs entries have been created, it may cause a kernel panic. This issue highlights the need for robust error handling to prevent system crashes due to missing hardware capabilities.

References