PT-2025-33758 · Linux+4 · Linux Kernel+4
Published
2025-07-13
·
Updated
2026-03-13
·
CVE-2025-38559
CVSS v2.0
6.0
Medium
| Vector | AV:L/AC:H/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
A flaw exists in the platform/x86/intel/pmt component of the Linux kernel related to a NULL pointer dereference when using
intel pmt read() for binary sysfs. This occurs when a pcidev is not provided, leading to a crashlog and a kernel panic. The issue arises from the use of an endpoint value that is only valid for telemetry endpoint usage. The fix involves augmenting the intel pmt entry structure with a pointer to the pcidev to prevent the NULL pointer exception. The function involved is intel pmt read().Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Suse
Ubuntu