CVE-2025-40011 | Linux Kernel up to 6.16.9 pci_set_drvdata null pointer dereference

October 20, 2025 Yanac

A vulnerability was found in Linux Kernel up to 6.16.9. It has been classified as critical. The impacted element is the function pci_set_drvdata. Performing manipulation results in null pointer dereference.

This vulnerability is identified as CVE-2025-40011. The attack can only be performed from the local network. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More