CVE-2025-23147 i3c: Add NULL pointer check in i3c_master_queue_ibi()
A missing NULL pointer check in the Linux kernel I3C driver allows a local attacker to trigger a kernel panic via asynchronous IBI events.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-23147?
CVE-2025-23147 is a medium-severity vulnerability in Debian Debian Linux, published on 1 May 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
i3c: Add NULL pointer check in i3c_master_queue_ibi()
The I3C master driver may receive an IBI from a target device that has not been probed yet. In such cases, the master calls `i3c_master_queue_ibi()` to queue an IBI work task, leading to "Unable to handle kernel read from unreadable memory" and resulting in a kernel panic.
Typical IBI handling flow: 1. The I3C master scans target devices and probes their respective drivers. 2. The target device driver calls `i3c_device_request_ibi()` to enable IBI and assigns `dev->ibi = ibi`. 3. The I3C master receives an IBI from the target device and calls `i3c_master_queue_ibi()` to queue the target device driver’s IBI handler task.
However, since target device events are asynchronous to the I3C probe sequence, step 3 may occur before step 2, causing `dev->ibi` to be `NULL`, leading to a kernel panic.
Add a NULL pointer check in `i3c_master_queue_ibi()` to prevent accessing an uninitialized `dev->ibi`, ensuring stability.
Weakness: CWE-476
Which versions are affected by CVE-2025-23147?
It affects 2 products.
Products include Debian Debian Linux, Linux kernel.
How do I fix CVE-2025-23147?
Apply the vendor's patch.
Is CVE-2025-23147 being exploited?
There is no known exploitation of CVE-2025-23147 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as BELL-CVE-2025-23147, DEBIAN-CVE-2025-23147, GHSA-6f84-p6h5-x3qm, ROOT-OS-DEBIAN-12-CVE-2025-23147, ROOT-OS-UBUNTU-2204-CVE-2025-23147, ROOT-OS-UBUNTU-2404-CVE-2025-23147 and 1 more.