A vulnerability in the Linux kernel's vp_vdpa component involved an id_table array that was not properly null-terminated. This flaw could cause the function vdpa_mgmtdev_get_classes() to iterate beyond the intended bounds and access undefined memory. The issue has been fixed by allocating an extra virtio_device_id as a null terminator.