Linux Kernel PCI/AER NULL Pointer Dereference Vulnerability

A vulnerability in the Linux kernel's PCI/AER subsystem can lead to a NULL pointer dereference. The issue arises because the memory allocation function may return NULL, and any subsequent access to the aer_info structure will cause a kernel panic. This vulnerability has been addressed by adding a check to ensure that the aer_info pointer is valid before accessing its members.

Impact

Exploitation of this vulnerability causes a kernel panic, leading to a denial of service by crashing the system.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for downloading the patched version are available on the Linux Kernel Archive.