CVE-2025-71313: PCI: endpoint: Add missing NULL check for alloc_workqueue()
In the Linux kernel, the following vulnerability has been resolved:
PCI: endpoint: Add missing NULL check for allocworkqueue()
allocworkqueue() can return NULL on memory allocation failure. Without proper error checking, this may lead to a NULL pointer dereference when queuework() is later called with the NULL workqueue pointer in epfntbepcinit().
Add a NULL check immediately after allocworkqueue() and return -ENOMEM on failure to prevent the driver from loading with an invalid workqueue pointer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-71313?
CVE-2025-71313 has a risk severity score of 15.
What does CVE-2025-71313 address?
CVE-2025-71313 addresses a missing NULL check for alloc_workqueue() in the Linux kernel.
How do I fix CVE-2025-71313?
To fix CVE-2025-71313, you need to apply the relevant kernel updates that implement the NULL check for alloc_workqueue().
What could happen if CVE-2025-71313 is exploited?
Exploitation of CVE-2025-71313 could lead to a NULL pointer dereference when queue_work() is called, potentially crashing the system.
Which software is affected by CVE-2025-71313?
CVE-2025-71313 affects the Linux kernel, particularly its PCI endpoint handling.