This Linux kernel vulnerability concerns the PCI endpoint MSI (Message Signaled Interrupts) allocation logic in pci_epf_alloc_doorbell(). When MSI allocation fails, the function frees the allocated doorbell message array but does not clear the pointers in the endpoint function (EPF) state, leaving them pointing to freed memory. This can cause double-free errors during cleanup or allow callers to overwrite existing allocations. The patch ensures that on MSI allocation failure, epf->db_msg and epf->num_db are cleared, and returns -EBUSY if doorbells are already allocated, preventing memory corruption and resource leaks.

The vulnerability could lead to double-free errors or memory corruption in the Linux kernel's PCI endpoint MSI handling. This may affect system stability or security by corrupting kernel memory management. No known exploits in the wild have been reported. The impact is limited to affected kernel versions running on systems using this PCI endpoint MSI functionality.

A fix is available in Linux kernel versions 7.0.0-28.28.1 and later. Users should update to these or newer kernel versions to remediate this issue. Since this is not a cloud service, manual patching is required. No additional mitigation steps are indicated by the vendor advisory.