The vulnerability in the Linux kernel's PCI/IOV code arises from the sriov_restore_vf_rebar_state() function using the VF Resizable BAR Control register values to determine how many VF BARs to restore and which BARs to address. Both values are 3 bits wide and can be 7 when a device does not respond, causing out-of-bounds access on an array with only 6 entries. This leads to an array-index-out-of-bounds error reported by UBSAN. The fix adds a check to bail out if any VF Resizable BAR Control read returns PCI_ERROR_RESPONSE, preventing invalid memory access and ensuring safe restoration behavior.

The vulnerability causes an out-of-bounds array access in the Linux kernel PCI/IOV subsystem when a device is unreachable and returns error responses during configuration reads. This can lead to kernel errors or crashes. The issue was specifically observed on an NVIDIA RTX PRO 1000 GPU during a failed power state exit. There is no indication of remote code execution or privilege escalation from the provided data.

A fix has been implemented in the Linux kernel to bail out of the VF Resizable BAR restoration process if a configuration read returns an error response, preventing out-of-bounds access. Users should apply the official Linux kernel update that includes this fix. Patch status is not explicitly confirmed in the provided data; check the vendor or Linux kernel advisories for the exact fixed versions and update accordingly.