CVE-2024-43875

What it actually does

Inconsistent NULL checking in vpci_scan_bus() allows a previously assumed-null vpci_bus pointer to be dereferenced after a reversed success/failure check, resulting in a crash or memory corruption in the PCI endpoint NTB function driver.

Why it matters to the business

Systems running affected Linux kernels may experience unexpected crashes or instability when PCI endpoint virtualization is used, increasing downtime risk for servers and embedded devices; low urgency as the issue is not known to be exploited in the wild.

How an attack unfolds

An attacker with local access or the ability to attach a malicious PCI device triggers vpci_scan_bus() error paths; the reversed NULL check causes incorrect control flow that dereferences a null pointer, leading to a kernel panic or potential memory corruption that could be leveraged for further exploitation.

How to fix it

Upgrade the Linux kernel to version 5.15.165 or later, or apply commit 24414c842a24d0fd498f9db6d2a762a8dddf1832 from the stable git repository; rebuild and reboot affected systems.

How to confirm the fix worked

Verify the running kernel version is at least 5.15.165; inspect drivers/pci/endpoint/functions/pci-epf-vntb.c to confirm the NULL check has been corrected to return an error code on failure instead of proceeding after an incorrect success message.

Typical attack path

1. Obtain local access or attach a crafted PCI endpoint device
2. Trigger PCI endpoint NTB function initialization that calls vpci_scan_bus()
3. Force the error-handling path with the reversed NULL check
4. Cause NULL pointer dereference resulting in crash or memory corruption

How to detect it

Search kernel logs and dmesg for messages referencing vpci_scan_bus, pci-epf-vntb, or NULL pointer dereference errors during PCI endpoint initialization; correlate with system crashes or panics on hosts using PCI NTB functions.

• vpci_scan_bus
• pci-epf-vntb.c
• we previously assumed 'vpci_bus' could be null

What your security team should do

• Apply the kernel update to 5.15.165 or the referenced commit on all affected systems within standard patching windows
• Review PCI endpoint configurations and disable unnecessary NTB functions where possible
• Monitor vendor kernel update channels for backports to other maintained series