Riskcovery

CVE-2025-68213

idpf: fix possible vport_config NULL pointer deref in remove

State
Published
Severity
Not scored
Published
Dec 16, 2025
Updated
May 23, 2026
Reserved
Dec 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

idpf: fix possible vport_config NULL pointer deref in remove

Attempting to remove the driver will cause a crash in cases where the vport failed to initialize. Following trace is from an instance where the driver failed during an attempt to create a VF: [ 1661.543624] idpf 0000:84:00.7: Device HW Reset initiated [ 1722.923726] idpf 0000:84:00.7: Transaction timed-out (op:1 cookie:2900 vc_op:1 salt:29 timeout:60000ms) [ 1723.353263] BUG: kernel NULL pointer dereference, address: 0000000000000028 ... [ 1723.358472] RIP: 0010:idpf_remove+0x11c/0x200 [idpf] ... [ 1723.364973] Call Trace: [ 1723.365475] <TASK> [ 1723.365972] pci_device_remove+0x42/0xb0 [ 1723.366481] device_release_driver_internal+0x1a9/0x210 [ 1723.366987] pci_stop_bus_device+0x6d/0x90 [ 1723.367488] pci_stop_and_remove_bus_device+0x12/0x20 [ 1723.367971] pci_iov_remove_virtfn+0xbd/0x120 [ 1723.368309] sriov_disable+0x34/0xe0 [ 1723.368643] idpf_sriov_configure+0x58/0x140 [idpf] [ 1723.368982] sriov_numvfs_store+0xda/0x1c0

Avoid the NULL pointer dereference by adding NULL pointer check for vport_config[i], before freeing user_config.q_coalesce.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • bd80fbf3ed250ca98923780dab5e634db5d2f828 to before a0e1c9bc1c9fe735978150ad075616a728073bc7Affected
  • e1e3fec3e34b4934a9d2c98e4ee00a4d87b19179 to before d5be8663cff0ba7b94da34ebd499ce1123b4c334Affected
  • e1e3fec3e34b4934a9d2c98e4ee00a4d87b19179 to before 118082368c2b6ddefe6cb607efc312285148f044Affected
  • 5e87b3145578a169839e456fa0aba86e123d2d8eAffected
  • ba11b0f3e9a97661f6caeee3dfc633af8ecee5a5Affected
  • 6.12.43 to before 6.12.60Affected
  • 6.15.11 to before 6.16Affected
  • 6.16.2 to before 6.17Affected
LinuxLinux
  • 6.17Affected
  • before 6.17Not affected
  • 6.12.60 through 6.12.*Not affected
  • 6.17.10 through 6.17.*Not affected
  • 6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.