https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 23:33:54 +0000 https://vulnerability.circl.lu/vuln/cve-2025-40263 <p><strong>Affected:</strong> Linux, Siemens RUGGEDCOM RST2428P</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>Input: cros_ec_keyb - fix an invalid memory access</p> <p>If cros_ec_keyb_register_matrix() isn&#39;t called (due to `buttons_switches_only`) in cros_ec_keyb_probe(), `ckdev-&gt;idev` remains NULL. An invalid memory access is observed in cros_ec_keyb_process() when receiving an EC_MKBP_EVENT_KEY_MATRIX event in cros_ec_keyb_work() in such case.</p> <p>Unable to handle kernel read from unreadable memory at virtual address 0000000000000028 ... x3 : 0000000000000000 x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: input_event cros_ec_keyb_work blocking_notifier_call_chain ec_irq_thread</p> <p>It&#39;s still unknown about why the kernel receives such malformed event, in any cases, the kernel shouldn&#39;t access `ckdev-&gt;idev` and friends if the driver doesn&#39;t intend to initialize them.</p> <p><strong>Affected:</strong> Linux, Siemens RUGGEDCOM RST2428P</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>Input: cros_ec_keyb - fix an invalid memory access</p> <p>If cros_ec_keyb_register_matrix() isn&#39;t called (due to `buttons_switches_only`) in cros_ec_keyb_probe(), `ckdev-&gt;idev` remains NULL. An invalid memory access is observed in cros_ec_keyb_process() when receiving an EC_MKBP_EVENT_KEY_MATRIX event in cros_ec_keyb_work() in such case.</p> <p>Unable to handle kernel read from unreadable memory at virtual address 0000000000000028 ... x3 : 0000000000000000 x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: input_event cros_ec_keyb_work blocking_notifier_call_chain ec_irq_thread</p> <p>It&#39;s still unknown about why the kernel receives such malformed event, in any cases, the kernel shouldn&#39;t access `ckdev-&gt;idev` and friends if the driver doesn&#39;t intend to initialize them.</p> https://vulnerability.circl.lu/vuln/cve-2025-40263