CVE-2025-40157

Source
https://nvd.nist.gov/vuln/detail/CVE-2025-40157
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-40157.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-40157
Downstream
Published
2025-11-12T10:23:29.258Z
Modified
2025-11-27T02:33:32.999784Z
Summary
EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller
Details

In the Linux kernel, the following vulnerability has been resolved:

EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller

When loading the i10nm_edac driver on some Intel Granite Rapids servers, a call trace may appear as follows:

UBSAN: shift-out-of-bounds in drivers/edac/skxcommon.c:453:16 shift exponent -66 is negative ... _ubsanhandleshiftoutofbounds+0x1e3/0x390 skxgetdimminfo.cold+0x47/0xd40 [skxedaccommon] i10nmgetdimmconfig+0x23e/0x390 [i10nmedac] skxregistermci+0x159/0x220 [skxedaccommon] i10nminit+0xcb0/0x1ff0 [i10nmedac] ...

This occurs because some BIOS may disable a memory controller if there aren't any memory DIMMs populated on this memory controller. The DIMMMTR register of this disabled memory controller contains the invalid value ~0, resulting in the call trace above.

Fix this call trace by skipping DIMM enumeration on a disabled memory controller.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/blob/cc431b3424123d84bcd7afd4de150b33f117a8ef/cves/2025/40xxx/CVE-2025-40157.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
ba987eaaabf99b462cdfed86274e3455d5126349
Fixed
8100b6c0f9089d5b156642b81270ce27fff17490
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
ba987eaaabf99b462cdfed86274e3455d5126349
Fixed
1652f14cf3bef5a4baa232de954fc22bdcaa78fe
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
ba987eaaabf99b462cdfed86274e3455d5126349
Fixed
c20da24272f1ac79e9f9083bba577d049cd02bbb
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
ba987eaaabf99b462cdfed86274e3455d5126349
Fixed
2e6fe1bbefd9c059c3787d1c620fe67343a94dff

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.3.0
Fixed
6.6.112
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.53
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.17.3