CVE-2025-68213
Description
In the Linux kernel, the following vulnerability has been resolved: idpf: fix possible vport_config NULL pointer deref in remove Attempting to remove the driver will cause a crash in cases where the vport failed to initialize. Following trace is from an instance where the driver failed during an attempt to create a VF: [ 1661.543624] idpf 0000:84:00.7: Device HW Reset initiated [ 1722.923726] idpf 0000:84:00.7: Transaction timed-out (op:1 cookie:2900 vc_op:1 salt:29 timeout:60000ms) [ 1723.353263] BUG: kernel NULL pointer dereference, address: 0000000000000028 ... [ 1723.358472] RIP: 0010:idpf_remove+0x11c/0x200 [idpf] ... [ 1723.364973] Call Trace: [ 1723.365475] <TASK> [ 1723.365972] pci_device_remove+0x42/0xb0 [ 1723.366481] device_release_driver_internal+0x1a9/0x210 [ 1723.366987] pci_stop_bus_device+0x6d/0x90 [ 1723.367488] pci_stop_and_remove_bus_device+0x12/0x20 [ 1723.367971] pci_iov_remove_virtfn+0xbd/0x120 [ 1723.368309] sriov_disable+0x34/0xe0 [ 1723.368643] idpf_sriov_configure+0x58/0x140 [idpf] [ 1723.368982] sriov_numvfs_store+0xda/0x1c0 Avoid the NULL pointer dereference by adding NULL pointer check for vport_config[i], before freeing user_config.q_coalesce.
How to fix
- Linux Linuxa0e1c9bc1c9fe735978150ad075616a728073bc7, d5be8663cff0ba7b94da34ebd499ce1123b4c334, 118082368c2b6ddefe6cb607efc312285148f044, 6.12.60, 6.16, 6.17 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | bd80fbf3ed250ca98923780dab5e634db5d2f828 ≤ v < a0e1c9bc1c9fe735978150ad075616a728073bc7, e1e3fec3e34b4934a9d2c98e4ee00a4d87b19179 ≤ v < d5be8663cff0ba7b94da34ebd499ce1123b4c334, e1e3fec3e34b4934a9d2c98e4ee00a4d87b19179 ≤ v < 118082368c2b6ddefe6cb607efc312285148f044, 5e87b3145578a169839e456fa0aba86e123d2d8e, ba11b0f3e9a97661f6caeee3dfc633af8ecee5a5, 6.12.43 ≤ v < 6.12.60, 6.15.11 ≤ v < 6.16, 6.16.2 ≤ v < 6.17, 6.17 | a0e1c9bc1c9fe735978150ad075616a728073bc7, d5be8663cff0ba7b94da34ebd499ce1123b4c334, 118082368c2b6ddefe6cb607efc312285148f044, 6.12.60, 6.16, 6.17 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.