CVE-2025-38559

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A flaw exists in the platform/x86/intel/pmt component of the Linux kernel related to a NULL pointer dereference when using intel pmt read() for binary sysfs. This occurs when a pcidev is not provided, leading to a crashlog and a kernel panic. The issue arises from the use of an endpoint value that is only valid for telemetry endpoint usage. The fix involves augmenting the intel pmt entry structure with a pointer to the pcidev to prevent the NULL pointer exception. The function involved is intel pmt read().

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.