Acknowledged
Created: Dec 16, 2025
Updated: Dec 18, 2025
Found In Version: 10.25.33.1
Severity: Standard
Applicable for: Wind River Linux LTS 25
Component/s: Kernel
In the Linux kernel, the following vulnerability has been resolved:[EOL][EOL]idpf: fix possible vport_config NULL pointer deref in remove[EOL][EOL]Attempting to remove the driver will cause a crash in cases where[EOL]the vport failed to initialize. Following trace is from an instance where[EOL]the driver failed during an attempt to create a VF:[EOL][ 1661.543624] idpf 0000:84:00.7: Device HW Reset initiated[EOL][ 1722.923726] idpf 0000:84:00.7: Transaction timed-out (op:1 cookie:2900 vc_op:1 salt:29 timeout:60000ms)[EOL][ 1723.353263] BUG: kernel NULL pointer dereference, address: 0000000000000028[EOL]...[EOL][ 1723.358472] RIP: 0010:idpf_remove+0x11c/0x200 [idpf][EOL]...[EOL][ 1723.364973] Call Trace:[EOL][ 1723.365475] <TASK>[EOL][ 1723.365972] pci_device_remove+0x42/0xb0[EOL][ 1723.366481] device_release_driver_internal+0x1a9/0x210[EOL][ 1723.366987] pci_stop_bus_device+0x6d/0x90[EOL][ 1723.367488] pci_stop_and_remove_bus_device+0x12/0x20[EOL][ 1723.367971] pci_iov_remove_virtfn+0xbd/0x120[EOL][ 1723.368309] sriov_disable+0x34/0xe0[EOL][ 1723.368643] idpf_sriov_configure+0x58/0x140 [idpf][EOL][ 1723.368982] sriov_numvfs_store+0xda/0x1c0[EOL][EOL]Avoid the NULL pointer dereference by adding NULL pointer check for[EOL]vport_config[i], before freeing user_config.q_coalesce.