CVE-2025-71233PCI: endpoint: Avoid creating sub-groups asynchronously
- 5.5MediumCVSS base score
- 0.14%Exploitation in 30 daysEPSS · top 97% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Avoid creating sub-groups asynchronously The asynchronous creation of sub-groups by a delayed work could lead to a NULL pointer dereference when the driver directory is removed before the work completes. The crash can be easily reproduced with the following commands: # cd /sys/kernel/config/pci_ep/functions/pci_epf_test # for i in {1..20}; do mkdir test && rmdir test; done BUG: kernel NULL pointer dereference, address: 0000000000000088 ... Call Trace: configfs_register_group+0x3d/0x190 pci_epf_cfs_work+0x41/0x110 process_one_work+0x18f/0x350 worker_thread+0x25a/0x3a0 Fix this issue by using configfs_add_default_group() API which does not have the deadlock problem as configfs_register_group() and does not require the delayed work handler. [mani: slightly reworded the description and added stable list]
Timeline
ID reserved
By Linux
Published
- 3 months later
· 3 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Analyzed | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.14% · top 97% of all CVEs (12 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.
Affected products
- affected e85a2d7837622bd99c96f5bbc7f972da90c285a2 – < fa9fb38f5fe9c80094c2138354d45cdc8d094d69
- affected e85a2d7837622bd99c96f5bbc7f972da90c285a2 – < 5f609b3bffd4207cf9f2c9b41e1978457a5a1ea9
- affected e85a2d7837622bd99c96f5bbc7f972da90c285a2 – < 8cb905eca73944089a0db01443c7628a9e87012d
- affected e85a2d7837622bd99c96f5bbc7f972da90c285a2 – < d9af3cf58bb4c8d6dea4166011c780756b1138b5
- affected e85a2d7837622bd99c96f5bbc7f972da90c285a2 – < 24a253c3aa6d9a2cde46158ce9782e023bfbf32d
- affected e85a2d7837622bd99c96f5bbc7f972da90c285a2 – < 73cee890adafa2c219bb865356e08e7f82423fe5
- affected e85a2d7837622bd99c96f5bbc7f972da90c285a2 – < 7c5c7d06bd1f86d2c3ebe62be903a4ba42db4d2c
- affected 5.12
- unaffected < 5.12
- unaffected 5.15.201 – ≤ 5.15.*
- unaffected 6.1.164 – ≤ 6.1.*
- unaffected 6.6.127 – ≤ 6.6.*
- unaffected 6.12.72 – ≤ 6.12.*
- unaffected 6.18.11 – ≤ 6.18.*
- unaffected 6.19.1 – ≤ 6.19.*
- unaffected 7.0 – ≤ *
References
References7
- https://git.kernel.org/stable/c/fa9fb38f5fe9c80094c2138354d45cdc8d094d69 (opens in a new tab)
- https://git.kernel.org/stable/c/5f609b3bffd4207cf9f2c9b41e1978457a5a1ea9 (opens in a new tab)
- https://git.kernel.org/stable/c/8cb905eca73944089a0db01443c7628a9e87012d (opens in a new tab)
- https://git.kernel.org/stable/c/d9af3cf58bb4c8d6dea4166011c780756b1138b5 (opens in a new tab)
- https://git.kernel.org/stable/c/24a253c3aa6d9a2cde46158ce9782e023bfbf32d (opens in a new tab)
- https://git.kernel.org/stable/c/73cee890adafa2c219bb865356e08e7f82423fe5 (opens in a new tab)
- https://git.kernel.org/stable/c/7c5c7d06bd1f86d2c3ebe62be903a4ba42db4d2c (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2025-207665 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2025-71233)Record last updated .