CVE-2025-68309: PCI/AER: Fix NULL pointer access by aer_info
Published Dec 16, 2025
·Updated
In the Linux kernel, the following vulnerability has been resolved:
PCI/AER: Fix NULL pointer access by aerinfo
The kzalloc(GFPKERNEL) may return NULL, so all accesses to aerinfo->xxx will result in kernel panic. Fix it.
Affected Software
2 affected components
linux-kernel
Microsoft azl3 kernel 6.6.117.1-1
Event History
Dec 16, 2025
CVE Published
via MITRE·03:39 PM
Data Sourced
via MITRE·03:39 PM
Description
Data Sourced
via NVD·04:16 PM
Description
Dec 18, 2025
Data Sourced
via Microsoft·01:03 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-68309?
CVE-2025-68309 is classified as a medium severity vulnerability affecting the Linux kernel.
2
How do I fix CVE-2025-68309?
To fix CVE-2025-68309, update your Linux kernel to the latest version where the vulnerability has been resolved.
3
What impact does CVE-2025-68309 have on my system?
CVE-2025-68309 can lead to a kernel panic due to a NULL pointer dereference, disrupting system stability.
4
Which versions of the Linux kernel are affected by CVE-2025-68309?
CVE-2025-68309 affects multiple versions of the Linux kernel prior to the patch release.
5
Is CVE-2025-68309 a remote exploit vulnerability?
CVE-2025-68309 is not primarily a remote exploit vulnerability but can impact systems under certain conditions if left unpatched.