Threats tagged 'ghsa-83jq-f5p9-r6x4'

CVE-2025-22092 is a medium severity vulnerability in the Linux kernel involving a NULL pointer dereference during the creation error path of SR-IOV virtual functions (VFs). The flaw occurs due to improper error handling when pci_setup_device() fails, leading to a kernel oops and potential denial of service. The issue is addressed by improved cleanup logic to prevent accessing partially initialized devices during removal.