CVE-2025-40076: PCI: rcar-host: Pass proper IRQ domain to generic_handle_domain_irq()
In the Linux kernel, the following vulnerability has been resolved:
PCI: rcar-host: Pass proper IRQ domain to generichandledomainirq()
Starting with commit dd26c1a23fd5 ("PCI: rcar-host: Switch to msicreateparentirqdomain()"), the MSI parent IRQ domain is NULL because the object of type struct irqdomaininfo passed to:
msicreateparentirqdomain() -> irqdomaininstantiate()() -> irqdomaininstantiate()
has no reference to the parent IRQ domain. Using msi->domain->parent as an argument for generichandledomainirq() leads to below error:
"Unable to handle kernel NULL pointer dereference at virtual address"
This error was identified while switching the upcoming RZ/G3S PCIe host controller driver to msicreateparentirqdomain() (which was using a similar pattern to handle MSIs (see link section)), but it was not tested on hardware using the pcie-rcar-host controller driver due to lack of hardware.
[mani: reworded subject and description]
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-40076?
CVE-2025-40076 is classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2025-40076?
To fix CVE-2025-40076, update to a version of the Linux kernel that includes the patch for this vulnerability.
What impact does CVE-2025-40076 have on my system?
CVE-2025-40076 may lead to improper handling of interrupts, potentially causing system instability.
Which versions of the Linux kernel are affected by CVE-2025-40076?
CVE-2025-40076 affects Linux kernel versions starting from commit dd26c1a23fd5.
Is there a workaround for CVE-2025-40076?
There is no known workaround for CVE-2025-40076; updating the kernel is recommended.