Memory Controller Vulnerability in Linux Kernel on Intel Granite Rapids Servers

CVE-2025-40157

What is CVE-2025-40157?

A vulnerability in the Linux kernel manifests when the i10nm_edac driver is loaded on certain Intel Granite Rapids servers. The issue arises due to some BIOS configurations that disable a memory controller if no memory DIMMs are present. This results in invalid values being read from the DIMMMTR register of the inactive memory controller, leading to unexpected call traces. By addressing this flaw, the driver can correctly bypass DIMM enumeration for disabled memory controllers, thus improving system stability and reliability.

References