Strix
26.1K

CVE-2025-40029

UnknownEPSS 0.20%

Last modified

CVE-2025-40029 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: Check return value of platform_get_resource() platform_get_resource() returns NULL in case of failure, so check its return value and propagate the error in order to prevent NULL pointer dereference.. EPSS estimates a 0.20% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: Check return value of platform_get_resource() platform_get_resource() returns NULL in case of failure, so check its return value and propagate the error in order to prevent NULL pointer dereference.

Metrics

EPSS Probability
0.20%

10.2th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 6305166c8771c33a8d5992fb53f93cfecedc14fd, < 58dd05070b57a20f22ff35a34ef9846bdf49a1d0; >= 6305166c8771c33a8d5992fb53f93cfecedc14fd, < 8a4dd74fe413d4a278e649be1d22d028e1667116; >= 6305166c8771c33a8d5992fb53f93cfecedc14fd, < e60d55692e6c8e951000343c39f3fc92cab57efc; >= 6305166c8771c33a8d5992fb53f93cfecedc14fd, < 78e87b8a3cf8a59671ea25c87192d16e8d710e1c; >= 6305166c8771c33a8d5992fb53f93cfecedc14fd, < 84ec0482ed9c9ed0aee553a5e7e7458ad79c021f; >= 6305166c8771c33a8d5992fb53f93cfecedc14fd, < 2ead548473f58c7960b6b939b79503c4a0a2c0bd; >= 6305166c8771c33a8d5992fb53f93cfecedc14fd, < 25f526507b8ccc6ac3a43bc094d09b1f9b0b90ae
LinuxLinux5.9

References

Timeline

Published
Last Modified
Status
Deferred

Frequently Asked Questions

What is CVE-2025-40029?
In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: Check return value of platform_get_resource() platform_get_resource() returns NULL in case of failure, so check its return value and propagate the error in order to prevent NULL pointer dereference.
How severe is CVE-2025-40029?
Severity scoring for CVE-2025-40029 is pending analysis. The EPSS model estimates a 0.20% probability of exploitation in the next 30 days.
How do I fix CVE-2025-40029?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2025

View all 2025CVEs →

Are you affected by CVE-2025-40029?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST