CVE-2025-40157

EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller

State
Published
Severity
Not scored
Published
Nov 12, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller

When loading the i10nm_edac driver on some Intel Granite Rapids servers, a call trace may appear as follows:

UBSAN: shift-out-of-bounds in drivers/edac/skx_common.c:453:16 shift exponent -66 is negative ... __ubsan_handle_shift_out_of_bounds+0x1e3/0x390 skx_get_dimm_info.cold+0x47/0xd40 [skx_edac_common] i10nm_get_dimm_config+0x23e/0x390 [i10nm_edac] skx_register_mci+0x159/0x220 [skx_edac_common] i10nm_init+0xcb0/0x1ff0 [i10nm_edac] ...

This occurs because some BIOS may disable a memory controller if there aren't any memory DIMMs populated on this memory controller. The DIMMMTR register of this disabled memory controller contains the invalid value ~0, resulting in the call trace above.

Fix this call trace by skipping DIMM enumeration on a disabled memory controller.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • ba987eaaabf99b462cdfed86274e3455d5126349 to before 8100b6c0f9089d5b156642b81270ce27fff17490Affected
  • ba987eaaabf99b462cdfed86274e3455d5126349 to before 1652f14cf3bef5a4baa232de954fc22bdcaa78feAffected
  • ba987eaaabf99b462cdfed86274e3455d5126349 to before c20da24272f1ac79e9f9083bba577d049cd02bbbAffected
  • ba987eaaabf99b462cdfed86274e3455d5126349 to before 2e6fe1bbefd9c059c3787d1c620fe67343a94dffAffected
LinuxLinux
  • 6.3Affected
  • before 6.3Not affected
  • 6.6.112 through 6.6.*Not affected
  • 6.12.53 through 6.12.*Not affected
  • 6.17.3 through 6.17.*Not affected
  • 6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.