Riskcovery

CVE-2025-71313

PCI: endpoint: Add missing NULL check for alloc_workqueue()

State
Published
Severity
Not scored
Published
Jun 3, 2026
Updated
Oct 30, 2026
Reserved
May 27, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

PCI: endpoint: Add missing NULL check for alloc_workqueue()

alloc_workqueue() can return NULL on memory allocation failure. Without proper error checking, this may lead to a NULL pointer dereference when queue_work() is later called with the NULL workqueue pointer in epf_ntb_epc_init().

Add a NULL check immediately after alloc_workqueue() and return -ENOMEM on failure to prevent the driver from loading with an invalid workqueue pointer.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 8b821cf761503b80d0bd052f932adfe1bc1a0088 to before 62b9e706d226329d1374c0c1b80222e75ae9d8cdAffected
  • 8b821cf761503b80d0bd052f932adfe1bc1a0088 to before 11e78304b0113d3a122dc2c37426adc34c809645Affected
  • 8b821cf761503b80d0bd052f932adfe1bc1a0088 to before 829ccfb22950c430f2bf5b40465510c210afb4d5Affected
  • 8b821cf761503b80d0bd052f932adfe1bc1a0088 to before 2f62f8be57882c26f8bede0cab293d013964208fAffected
  • 8b821cf761503b80d0bd052f932adfe1bc1a0088 to before 314eab6740bcda504ef978be599f805de05ce6deAffected
  • 8b821cf761503b80d0bd052f932adfe1bc1a0088 to before 03f336a869b3a3f119d3ae52ac9723739c7fb7b6Affected
LinuxLinux
  • 5.12Affected
  • before 5.12Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.114 through 6.12.*Not affected
  • 6.18.57 through 6.18.*Not affected
  • 6.19.4 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.