Vulnerability in Linux

CVE-2025-68309

In the Linux kernel, the following vulnerability has been resolved: PCI/AER: Fix NULL pointer access by aer_info The kzalloc(GFP_KERNEL) may return NULL, so all accesses to aer_info->xxx will result in kernel panic. Fix it.

EPSS: 0.002 (4.7th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions a57f2bfb4a5863f83087867c0e671f2418212d23, 6.16, 0

References