CVE-2025-71313
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
36/100
Published: 2026-06-03
Modified: 2026-10-30
First seen: 2026-10-30
Status: active
Attack Surface
Low Complexity
No Interaction
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
None
I:
None
A:
High
Description
In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Add missing NULL check for alloc_workqueue() alloc_workqueue() can return NULL on memory allocation failure. Without proper error checking, this may lead to a NULL pointer dereference when queue_work() is later called with the NULL workqueue pointer in epf_ntb_epc_init(). Add a NULL check immediately after alloc_workqueue() and return -ENOMEM on failure to prevent the driver from loading with an invalid workqueue pointer.
Weakness Classification (1)
Affected Software (8)
| Vendor | Product | Version |
|---|---|---|
| Linux | Linux | 8b821cf761503b80d0bd052f932adfe1bc1a0088 < 62b9e706d226329d1374c0c1b80222e75ae9d8cd |
| Linux | Linux | 8b821cf761503b80d0bd052f932adfe1bc1a0088 < 11e78304b0113d3a122dc2c37426adc34c809645 |
| Linux | Linux | 8b821cf761503b80d0bd052f932adfe1bc1a0088 < 829ccfb22950c430f2bf5b40465510c210afb4d5 |
| Linux | Linux | 8b821cf761503b80d0bd052f932adfe1bc1a0088 < 2f62f8be57882c26f8bede0cab293d013964208f |
| Linux | Linux | 8b821cf761503b80d0bd052f932adfe1bc1a0088 < 314eab6740bcda504ef978be599f805de05ce6de |
| Linux | Linux | 8b821cf761503b80d0bd052f932adfe1bc1a0088 < 03f336a869b3a3f119d3ae52ac9723739c7fb7b6 |
| Linux | Linux | 5.12 |
| linux | linux_kernel | 5.12 – 6.19.4 |