CVE-2025-38178
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
04/07/2025
Última modificación:
04/07/2025
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
EDAC/igen6: Fix NULL pointer dereference<br />
<br />
A kernel panic was reported with the following kernel log:<br />
<br />
EDAC igen6: Expected 2 mcs, but only 1 detected.<br />
BUG: unable to handle page fault for address: 000000000000d570<br />
...<br />
Hardware name: Notebook V54x_6x_TU/V54x_6x_TU, BIOS Dasharo (coreboot+UEFI) v0.9.0 07/17/2024<br />
RIP: e030:ecclog_handler+0x7e/0xf0 [igen6_edac]<br />
...<br />
igen6_probe+0x2a0/0x343 [igen6_edac]<br />
...<br />
igen6_init+0xc5/0xff0 [igen6_edac]<br />
...<br />
<br />
This issue occurred because one memory controller was disabled by<br />
the BIOS but the igen6_edac driver still checked all the memory<br />
controllers, including this absent one, to identify the source of<br />
the error. Accessing the null MMIO for the absent memory controller<br />
resulted in the oops above.<br />
<br />
Fix this issue by reverting the configuration structure to non-const<br />
and updating the field &#39;res_cfg->num_imc&#39; to reflect the number of<br />
detected memory controllers.