Vulnerability in Linux

CVE-2025-40033

In the Linux kernel, the following vulnerability has been resolved: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() pru_rproc_set_ctable() accessed rproc->priv before the IS_ERR_OR_NULL check, which could lead to a null pointer dereference. Move the pru assignment, ensuring we never dereference a NULL rproc pointer.

EPSS: 0.002 (10.3th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 102853400321baea2527917e6e89be33508c3e18, 6.3, 0

References