Null Pointer Dereference Vulnerability in Linux Kernel PCI/AER Module

CVE-2025-68309

What is CVE-2025-68309?

A vulnerability has been identified in the PCI/AER module of the Linux kernel, where improper handling of memory allocation through kzalloc can lead to a null pointer dereference. If kzalloc returns NULL, any access to the aer_info structure can trigger a kernel panic, resulting in system instability. This issue emphasizes the importance of checking return values for memory allocation to prevent unforeseen errors in kernel operations.

References