CVE-2025-40157: linux

CVSS: UnknownDeferred
AliasesUBUNTU-CVE-2025-40157DEBIAN-CVE-2025-40157
Published 12-11-2025Last modified 11-05-2026
Open JSON

Vulnerability summary

CVE-2025-40157 is a vulnerability in linux with no CVSS score yet. EPSS estimates a 0.25% chance of exploitation in the next 30 days, higher than 14.8% of scored vulnerabilities.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
0.25%
0%100%
Low · +0.02 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 24 · Related 24
OPENSUSE-SU-2025:20172-1SUSE-SU-2025:4393-1SUSE-SU-2025:4422-1SUSE-SU-2025:4505-1SUSE-SU-2025:4516-1SUSE-SU-2025:4517-1

Timeline

  1. 12-11-2025
    PublishedVulnerability first disclosed.
  2. 11-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller When loading the i10nm_edac driver on some Intel Granite Rapids servers, a call trace may appear as follows: UBSAN: shift-out-of-bounds in drivers/edac/skx_common.c:453:16 shift exponent -66 is negative ... __ubsan_handle_shift_out_of_bounds+0x1e3/0x390 skx_get_dimm_info.cold+0x47/0xd40 [skx_edac_common] i10nm_get_dimm_config+0x23e/0x390 [i10nm_edac] skx_register_mci+0x159/0x220 [skx_edac_common] i10nm_init+0xcb0/0x1ff0 [i10nm_edac] ... This occurs because some BIOS may disable a memory controller if there aren't any memory DIMMs populated on this memory controller. The DIMMMTR register of this disabled memory controller contains the invalid value ~0, resulting in the call trace above. Fix this call trace by skipping DIMM enumeration on a disabled memory controller.

CVSS metrics

Risk metrics not yet published.

EPSS trend

Probability

0.25%

Chance of exploitation in the next 30 days

Percentile

15%

Versus all other CVEs

30-day change

+0.02 pp

From 0.23% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.25%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu119 products
  • linux< 6.8.0-86.87
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 6.8.0-1041.43
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian1 product
  • linux< 6.12.57-1 | < 6.17.6-1
Linux1 product
  • linux≥ ba987eaaabf99b462cdfed86274e3455d5126349, < 8100b6c0f9089d5b156642b81270ce27fff17490 | ≥ ba987eaaabf99b462cdfed86274e3455d5126349, < 1652f14cf3bef5a4baa232de954fc22bdcaa78fe | ≥ ba987eaaabf99b462cdfed86274e3455d5126349, < c20da24272f1ac79e9f9083bba577d049cd02bbb | ≥ ba987eaaabf99b462cdfed86274e3455d5126349, < 2e6fe1bbefd9c059c3787d1c620fe67343a94dff | 6.3

3 vendors · 121 products

References

17 links
Show all 17 references