CVE-2025-22031

In the Linux kernel, the following vulnerability has been resolved: PCI/bwctrl: Fix NULL pointer dereference on bus number exhaustion When BIOS neglects to assign bus numbers to PCI bridges, the kernel attempts to correct that during PCI device enumeration. If it runs out of bus numbers, no pcibu...

CVE-2025-22031

CVE-2025-22031 affects the Linux kernel PCI/bwctrl subsystem. Root cause: when bus numbers are exhausted during PCI device enumeration, subordinate becomes NULL, and the bandwidth controller dereferences it during probe. This leads to a NULL pointer dereference and silent erroring of bandwidth co...