CVE-2025-40157

A flaw was found in the Linux kernel's i10nm_edac driver. A local user with elevated privileges could trigger a denial of service when the driver is loaded on systems where a memory controller is disabled by the BIOS due to unpopulated memory modules (DIMMs). This specific condition causes a shift-out-of-bounds error, leading to a system crash and making the system unavailable.

The i10nm_edac fix skips DIMM enumeration when a memory controller is disabled, preventing a UBSAN shift-out-of-bounds during driver init. This cannot be triggered remotely and requires privileged module loading plus a specific firmware state, so it’s low-risk (DoS-only) operational hardening rather than a meaningful security issue.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.