CVE-2025-38559: 
Linux Kernel vulnerability analysis and mitigation

A vulnerability was discovered in the Linux kernel (CVE-2025-38559) related to a NULL pointer access issue in the platform/x86/intel/pmt component. The vulnerability was disclosed on August 19, 2025, affecting the intelpmtread() function when used for binary sysfs operations (NVD).

The vulnerability stems from the usage of intelpmtread() for binary sysfs, which requires a pcidev. The current implementation only validates the endpoint value for telemetry endpoint usage. When used without the endpoint (ep) parameter, the crashlog usage triggers a NULL pointer exception at address 0x0000000000000000. The issue manifests in the call trace through various kernel functions including sysfskfbinread, kernfsfopreaditer, and others (NVD).

The vulnerability results in a kernel NULL pointer dereference, which can lead to system crashes and potential denial of service conditions. This affects systems utilizing the Intel Platform Monitoring Technology (PMT) functionality (NVD).

The fix involves augmenting the struct intelpmtentry with a pointer to the pcidev to prevent the NULL pointer exception. This modification has been implemented in the kernel source code to properly handle the crashlog usage scenario (NVD).