CVE-2025-40263

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw where an invalid memory access can occur in the cros ec keyb process() function when receiving an EC MKBP EVENT KEY MATRIX event. This happens if cros ec keyb register matrix() was not called, resulting in a NULL pointer dereference when attempting to access ckdev->idev. The root cause is accessing kernel memory at a virtual address without proper initialization. The issue occurs within the cros ec keyb work() function, triggered by events handled through the input event function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.