Linux · Linux Kernel · CVE-2025-38069
**Name of the Vulnerable Software and Affected Versions**
Linux kernel (affected versions not specified)
**Description**
A double free issue in the Linux kernel has been resolved. The issue occurred during the initialization of the Endpoint driver, specifically when handling the PERST# deassertion. The `pci epf test alloc space()` function allocates all BARs, which are freed if `epc set bar()` fails. However, the error path did not clear the previous assignment to `epf test->reg[bar]`, leading to a double free situation when the host reboots and the BAR allocation sequence restarts. The fix ensures that `pci epf alloc space()` and `pci epf free space()` invocations are symmetric, and sets `epf test->reg[bar]` to NULL when memory is freed.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.