5.5

CVE-2025-71233: PCI: endpoint: Avoid creating sub-groups asynchronously

Analyzed
AliasesUBUNTU-CVE-2025-71233DEBIAN-CVE-2025-71233
Published 18-02-2026Last modified 11-05-2026

Vulnerability summary

CVE-2025-71233 is a medium (CVSS 5.5) NULL Pointer Dereference vulnerability in linux. EPSS estimates a 0.14% chance of exploitation in the next 30 days, higher than 3.2% of scored vulnerabilities.

Priority
Routine

Not severe (CVSS 5.5, local access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.14%
0%100%
Low · +0.02 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 30 · Related 27
DLA-4499-1DSA-6141-1DSA-6163-1OPENSUSE-SU-2026:10387-1OPENSUSE-SU-2026:20416-1SUSE-SU-2026:20838-1

Timeline

  1. 18-02-2026
    PublishedVulnerability first disclosed.
  2. 11-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Avoid creating sub-groups asynchronously The asynchronous creation of sub-groups by a delayed work could lead to a NULL pointer dereference when the driver directory is removed before the work completes. The crash can be easily reproduced with the following commands: # cd /sys/kernel/config/pci_ep/functions/pci_epf_test # for i in {1..20}; do mkdir test && rmdir test; done BUG: kernel NULL pointer dereference, address: 0000000000000088 ... Call Trace: configfs_register_group+0x3d/0x190 pci_epf_cfs_work+0x41/0x110 process_one_work+0x18f/0x350 worker_thread+0x25a/0x3a0 Fix this issue by using configfs_add_default_group() API which does not have the deadlock problem as configfs_register_group() and does not require the delayed work handler. [mani: slightly reworded the description and added stable list]

CVSS metrics

3 scores · 3 sources · 1 version

EPSS trend

Probability

0.14%

Chance of exploitation in the next 30 days

Percentile

3%

Versus all other CVEs

30-day change

Increase +0.02 pp

From 0.12% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Version check

Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Ubuntu142 products
  • linux< 5.15.0-186.196 | < 6.8.0-134.134 | All versions (No fix recorded)
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 5.15.0-1112.119 | < 6.8.0-1060.63 | All versions (No fix recorded)
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ e85a2d7837622bd99c96f5bbc7f972da90c285a2, < fa9fb38f5fe9c80094c2138354d45cdc8d094d69 | ≥ e85a2d7837622bd99c96f5bbc7f972da90c285a2, < 5f609b3bffd4207cf9f2c9b41e1978457a5a1ea9 | ≥ e85a2d7837622bd99c96f5bbc7f972da90c285a2, < 8cb905eca73944089a0db01443c7628a9e87012d | ≥ e85a2d7837622bd99c96f5bbc7f972da90c285a2, < d9af3cf58bb4c8d6dea4166011c780756b1138b5 | ≥ e85a2d7837622bd99c96f5bbc7f972da90c285a2, < 24a253c3aa6d9a2cde46158ce9782e023bfbf32d | ≥ e85a2d7837622bd99c96f5bbc7f972da90c285a2, < 73cee890adafa2c219bb865356e08e7f82423fe5 | ≥ e85a2d7837622bd99c96f5bbc7f972da90c285a2, < 7c5c7d06bd1f86d2c3ebe62be903a4ba42db4d2c | 5.12
  • linux_kernel≥ 5.12, < 5.15.201 | ≥ 5.16, < 6.1.164 | ≥ 6.2, < 6.6.127 | ≥ 6.7, < 6.12.72 | ≥ 6.13, < 6.18.11 | ≥ 6.19, < 6.19.1
Debian1 product
  • linux< 6.1.164-1 | < 6.12.73-1 | < 6.18.12-1

3 vendors · 145 products

References

33 links
Show all 33 references