CVE-2025-40034 | Linux Kernel up to 6.17.2 PCI aer_ratelimit null pointer dereference

October 28, 2025 Yanac

A vulnerability identified as critical has been detected in Linux Kernel up to 6.17.2. The impacted element is the function aer_ratelimit of the component PCI. The manipulation leads to null pointer dereference.

This vulnerability is uniquely identified as CVE-2025-40034. The attack can only be initiated within the local network. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More