The Linux kernel's pci_endpoint_test_ioctl() function contained a vulnerability where passing a negative number, specifically the NO_BAR value (-1) added to the pci_barno enum, caused an array underflow in pci_endpoint_test_bar(). This was due to the enum changing from unsigned to signed, allowing negative indices to access memory before the array bounds. The vulnerability has been fixed by correcting this logic in the kernel code.

Successful exploitation of this vulnerability could lead to memory corruption resulting in high impact on confidentiality, integrity, and availability of the affected system. The CVSS vector indicates local attack vector with low complexity and low privileges required, no user interaction, and high impact on all security properties (C, I, A).

A fix has been implemented in the Linux kernel source to address this vulnerability. Users should apply the official kernel updates that include this patch. Since this is not a cloud service, remediation depends on deploying the fixed kernel version. Patch status is not explicitly confirmed in the provided data; check the vendor advisory or kernel mailing lists for the exact fixed version and update accordingly.