PT-2025-33758 · Linux+4 · Linux Kernel+4
Publicado
2025-07-13
·
Atualizado
2026-03-13
·
CVE-2025-38559
CVSS v2.0
6.0
Média
| Vetor | AV:L/AC:H/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
A flaw exists in the platform/x86/intel/pmt component of the Linux kernel related to a NULL pointer dereference when using
intel pmt read() for binary sysfs. This occurs when a pcidev is not provided, leading to a crashlog and a kernel panic. The issue arises from the use of an endpoint value that is only valid for telemetry endpoint usage. The fix involves augmenting the intel pmt entry structure with a pointer to the pcidev to prevent the NULL pointer exception. The function involved is intel pmt read().Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
NULL Pointer Dereference
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Astra Linux
Linuxmint
Linux Kernel
Suse
Ubuntu