CVE-2025-71313

Source
https://cve.org/CVERecord?id=CVE-2025-71313
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-71313.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-71313
Downstream
AZL (1)
BELL (1)
CGA (80)
DEBIAN (1)
ROOT (4)
UBUNTU (1)
Published
2026-06-03T15:49:38Z
Modified
2026-11-01T02:30:17Z
Summary
PCI: endpoint: Add missing NULL check for alloc_workqueue()
Details

In the Linux kernel, the following vulnerability has been resolved:

PCI: endpoint: Add missing NULL check for alloc_workqueue()

alloc_workqueue() can return NULL on memory allocation failure. Without proper error checking, this may lead to a NULL pointer dereference when queue_work() is later called with the NULL workqueue pointer in epf_ntb_epc_init().

Add a NULL check immediately after alloc_workqueue() and return -ENOMEM on failure to prevent the driver from loading with an invalid workqueue pointer.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/71xxx/CVE-2025-71313.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
8b821cf761503b80d0bd052f932adfe1bc1a0088
Fixed
62b9e706d226329d1374c0c1b80222e75ae9d8cd
Fixed
11e78304b0113d3a122dc2c37426adc34c809645
Fixed
829ccfb22950c430f2bf5b40465510c210afb4d5
Fixed
2f62f8be57882c26f8bede0cab293d013964208f
Fixed
314eab6740bcda504ef978be599f805de05ce6de
Fixed
03f336a869b3a3f119d3ae52ac9723739c7fb7b6

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-71313.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.12.0
Fixed
6.1.191
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.160
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.114
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.57
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
6.19.4

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-71313.json"