Linux Kernel PCI NULL Pointer Dereference Vulnerability in SR-IOV VF Creation Error Path

A NULL pointer dereference vulnerability has been identified in the Linux kernel's PCI subsystem, specifically during the creation of Virtual Functions (VFs) in Single Root I/O Virtualization (SR-IOV) environments. This issue arises when the error handling flow fails to properly manage device removal, leading to a kernel oops caused by accessing partially initialized virtual function devices. The vulnerability has been addressed by improving the error handling process, ensuring that proper cleanup is performed when setting up virtual functions, thus preventing NULL pointer dereferences during device removal.

Impact

Exploitation of this vulnerability leads to a kernel NULL pointer dereference, causing a system crash.