CVE-2025-40107

Name of the Vulnerable Software and Affected Versions Linux Kernel (hi311x CAN driver) (affected versions not specified)

Description The Linux kernel’s hi311x CAN driver contains a flaw where a null pointer dereference can occur when resuming from sleep if the network interface was not previously enabled. This is due to the priv->wq (workqueue) not being allocated and initialized before being used during device resume. The issue is similar to a previously fixed problem in the mcp251x driver. The driver schedules priv->restart work during resume, which can lead to a null pointer dereference if the interface was not enabled beforehand. The fix involves moving the allocation and initialization of the workqueue from the hi3110 open function to the hi3110 can probe function, and adding logic to destroy the workqueue in error handling paths to prevent resource leaks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.