CVE-2025-68309

Source
https://cve.org/CVERecord?id=CVE-2025-68309
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-68309.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-68309
Downstream
Published
2025-12-16T15:39:40.757Z
Modified
2026-05-15T04:14:11.887932928Z
Summary
PCI/AER: Fix NULL pointer access by aer_info
Details

In the Linux kernel, the following vulnerability has been resolved:

PCI/AER: Fix NULL pointer access by aer_info

The kzalloc(GFPKERNEL) may return NULL, so all accesses to aerinfo->xxx will result in kernel panic. Fix it.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68309.json"
}
References

Affected packages

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.16.0
Fixed
6.17.8

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-68309.json"