CVE-2025-40234: platform/x86: alienware-wmi-wmax: Fix NULL pointer dereference in sleep handlers
In the Linux kernel, the following vulnerability has been resolved:
platform/x86: alienware-wmi-wmax: Fix NULL pointer dereference in sleep handlers
Devices without the AWCC interface don't initialize awcc. Add a check before dereferencing it in sleep handlers.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-40234?
CVE-2025-40234 has a medium severity due to the potential for a NULL pointer dereference in sleep handlers.
How do I fix CVE-2025-40234?
To fix CVE-2025-40234, update your Linux kernel to the latest version where this vulnerability has been resolved.
Which systems are affected by CVE-2025-40234?
CVE-2025-40234 affects systems running the Linux kernel that utilize the alienware-wmi-wmax drivers without the AWCC interface.
What are the consequences of not addressing CVE-2025-40234?
Failure to address CVE-2025-40234 may result in system crashes or instability due to the NULL pointer dereference issue during sleep operations.
Is there a workaround for CVE-2025-40234?
Currently, the recommended method to mitigate CVE-2025-40234 is to update the Linux kernel, as there are no specific workarounds documented.