What’s Vulnerable › Vulnerabilities

CVE-2025-68309: PCI/AER: Fix NULL pointer access by aer_info

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-16 · updated 2026-10-14

Description

In the Linux kernel, the following vulnerability has been resolved: PCI/AER: Fix NULL pointer access by aer_info The kzalloc(GFP_KERNEL) may return NULL, so all accesses to aer_info->xxx will result in kernel panic. Fix it.

Affected products

• Linux kernel: 6.16 — fixed in 6.18

How to fix

Upgrade to a fixed version: Linux kernel 6.18. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0a27bdb14b028fed30a10cec2f945c38cb5ca4fa
• https://git.kernel.org/stable/c/6618243bcc3f60825f761a41ed65fef9fe97eb25

Get alerted when CVE-2025-68309 or the next vulnerability affects your stack