Linux Kernel PCI/ASPM Vulnerability in Link State Management

A vulnerability in the Linux kernel's PCI/ASPM link state management has been addressed. The issue arose during the removal of upstream functions, where the link state was not properly managed, leading to use-after-free vulnerabilities. This mismanagement was particularly problematic with PCIe switches that have multiple functions, as it could result in accessing freed memory, causing general protection faults. The vulnerability was more pronounced during hot-unplug operations, where devices are removed in reverse order, exacerbating the timing of link state management.

Impact

The vulnerability could lead to use-after-free conditions, causing general protection faults, particularly during hot-unplug operations.