CVE-2025-68213

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the idpf driver related to the removal of the driver. Specifically, a NULL pointer dereference can occur in the idpf remove function when attempting to remove the driver if the vport failed to initialize. This can lead to a system crash. The issue is triggered when the driver attempts to free memory associated with a null vport config pointer. The call trace indicates involvement of functions such as pci device remove, device release driver internal, pci stop bus device, pci stop and remove bus device, pci iov remove virtfn, sriov disable, idpf sriov configure, and sriov numvfs store.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.