Linux Kernel SCMI Debug Subsystem Vulnerability Affecting Firmware

CVE-2025-40226

What is CVE-2025-40226?

A vulnerability in the Linux kernel's firmware affects the SCMI debug subsystem, leading to issues when the debug initialization fails. In such cases, the associated debug root may not be established, causing the underlying descriptor to be NULL. This could lead to faults in the SCMI debug helpers responsible for tracking metrics counters, though the kernel has addressed this issue to enhance the system's stability and reliability.

References