CVE-2025-40029

In the Linux kernel, the following vulnerability has been resolved:

bus: fsl-mc: Check return value of platform_get_resource()

platform_get_resource() returns NULL in case of failure, so check its return value and propagate the error in order to prevent NULL pointer dereference.

Exploitation is effectively impossible for unprivileged users: the failure case can only occur during driver probe when platform resources are provided by ACPI/DT or by manually creating malformed platform devices. Triggering this path requires full root-level control over hardware description (ACPI/DTB or sysfs).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.