CVE-2025-71233
MediumSummary
A vulnerability has been identified in the Linux kernel related to the asynchronous creation of sub-groups in the PCI context. This could lead to a NULL pointer dereference if the driver directory is removed before the work completes.
Risk Assessment
This vulnerability may lead to system crashes, impacting the availability of services within the organization. If this issue occurs, the system may hang.
Recommendation
It is recommended to update the Linux kernel to the latest version where this vulnerability has been patched. Additionally, monitor systems for potential crashes.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Avoid creating sub-groups asynchronously The asynchronous creation of sub-groups by a delayed work could lead to a NULL pointer dereference when the driver directory is removed before the work completes. The crash