What’s Vulnerable › Vulnerabilities

CVE-2025-40234: platform/x86: alienware-wmi-wmax: Fix NULL pointer dereference in sleep handlers

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-04 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: platform/x86: alienware-wmi-wmax: Fix NULL pointer dereference in sleep handlers Devices without the AWCC interface don't initialize `awcc`. Add a check before dereferencing it in sleep handlers.

Affected products

• Linux kernel: 6.16 — fixed in 6.18

How to fix

Upgrade to a fixed version: Linux kernel 6.18. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/24c3812c9e817d19e4842d7495561594de1ddcb4
• https://git.kernel.org/stable/c/a49c4d48c3b60926e6a8cec217bf95aa65388ecc

Get alerted when CVE-2025-40234 or the next vulnerability affects your stack