CVE-2025-40195

A flaw was found in kernel. This vulnerability allows local denial-of-service via a NULL pointer dereference in pid_nr_ns() when called with a NULL PID namespace.

The vulnerability is a NULL pointer dereference in pid_nr_ns() when it is called with a NULL PID namespace, leading to a kernel panic from paths such as __task_pid_nr_ns() on certain platforms. In realistic setups, this is a local denial-of-service issue, likely requiring specific kernel configuration or privileges to trigger reliably. In a worst-case scenario where unprivileged users can reach this path in a controlled way, any local user could crash the system.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.