PT-2025-18401 · Linux+6 · Linux Kernel+6
Published
2025-03-31
·
Updated
2026-04-20
·
CVE-2025-23147
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A vulnerability in the Linux kernel's I3C master driver may cause a kernel panic when receiving an IBI from a target device that has not been probed yet. The issue occurs because the target device events are asynchronous to the I3C probe sequence, leading to a NULL pointer dereference in
i3c master queue ibi(). This results in an "Unable to handle kernel read from unreadable memory" error. The typical IBI handling flow involves the I3C master scanning target devices, probing their drivers, and calling i3c device request ibi() to enable IBI. However, if the I3C master receives an IBI before the target device driver is probed, dev->ibi will be NULL, causing the kernel panic. Adding a NULL pointer check in i3c master queue ibi() prevents accessing an uninitialized dev->ibi, ensuring stability.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu