CVE-2025-68213

Vulnerability

CVE-2025-68213 is a NULL pointer dereference vulnerability in the Linux kernel's idpf driver, specifically in the idpf_remove function. The root cause is that the code does not check if vport_config[i] is NULL before accessing vport_config[i]->user_config.q_coalesce during driver removal. This can occur when a virtual port (vport) fails to initialize, for example due to a hardware reset timeout or other initialization error [1].

Exploitation

An attacker with the ability to trigger driver removal or cause vport initialization failures (such as via VF creation with malformed parameters or triggering hardware resets) can exploit this vulnerability. The attack vector is local, requiring access to the system as a privileged user or the ability to control the device's PCI configuration. No authentication is needed beyond the kernel privileges required to load/unload drivers or manage SR-IOV virtual functions [1].

Impact

Successful exploitation leads to a kernel NULL pointer dereference, resulting in a system crash (kernel panic) and denial of service (DoS). The attacker can cause the system to become unavailable, as demonstrated by the kernel trace showing a BUG and RIP in idpf_remove. No privilege escalation or code execution is indicated by the description [1].

Mitigation

The fix adds a NULL pointer check for vport_config[i] before freeing user_config.q_coalesce, preventing the dereference. This patch has been merged into the Linux kernel stable tree. Users should apply the kernel update containing commit d5be8663cff0ba7b94da34ebd499ce1123b4c334. No workaround is mentioned, so patching is the recommended mitigation [1].