In the Linux kernel, the following vulnerability has been resolved:
PCI: rcar-host: Pass proper IRQ domain to generichandledomain_irq()
Starting with commit dd26c1a23fd5 ("PCI: rcar-host: Switch to msicreateparentirqdomain()"), the MSI parent IRQ domain is NULL because the object of type struct irqdomaininfo passed to:
msicreateparentirqdomain() -> irqdomaininstantiate()() -> _irqdomain_instantiate()
has no reference to the parent IRQ domain. Using msi->domain->parent as an argument for generichandledomain_irq() leads to below error:
"Unable to handle kernel NULL pointer dereference at virtual address"
This error was identified while switching the upcoming RZ/G3S PCIe host controller driver to msicreateparentirqdomain() (which was using a similar pattern to handle MSIs (see link section)), but it was not tested on hardware using the pcie-rcar-host controller driver due to lack of hardware.
[mani: reworded subject and description]
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40076.json",
"cna_assigner": "Linux"
}