PT-2025-44760 · Linux+3 · Linux Kernel+3
Published
2025-09-11
·
Updated
2026-05-07
·
CVE-2025-40107
CVSS v2.0
4.4
Medium
| Vector | AV:L/AC:M/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux Kernel (hi311x CAN driver) (affected versions not specified)
Description
The Linux kernel’s hi311x CAN driver contains a flaw where a null pointer dereference can occur when resuming from sleep if the network interface was not previously enabled. This is due to the
priv->wq (workqueue) not being allocated and initialized before being used during device resume. The issue is similar to a previously fixed problem in the mcp251x driver. The driver schedules priv->restart work during resume, which can lead to a null pointer dereference if the interface was not enabled beforehand. The fix involves moving the allocation and initialization of the workqueue from the hi3110 open function to the hi3110 can probe function, and adding logic to destroy the workqueue in error handling paths to prevent resource leaks.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Linux Kernel
Linuxmint
Ubuntu