33 matches found
CVE-2026-97505
A flaw was found in the Linux kernel. Missing authorization checks in the PCI sysfs interface can allow a local user to cause a denial of service DoS. The kernel fails to verify administrative capabilities when resizing a device Base Address Register BAR, relying only on basic file access...
SUSE CVE-2026-97505
In the Linux kernel, the following vulnerability has been resolved: PCI/sysfs: Add CAPSYSADMIN check to resourceresizestore Currently, the resourceresizestore allows writing to the resourceNresize sysfs attribute to change a BAR's size without checking for capabilities, currently relying only on...
CVE-2026-97505
In the Linux kernel, the following vulnerability has been resolved: PCI/sysfs: Add CAPSYSADMIN check to resourceresizestore Currently, the resourceresizestore allows writing to the resourceNresize sysfs attribute to change a BAR's size without checking for capabilities, currently relying only on...
UBUNTU-CVE-2026-97505
In the Linux kernel, the following vulnerability has been resolved: PCI/sysfs: Add CAPSYSADMIN check to resourceresizestore Currently, the resourceresizestore allows writing to the resourceNresize sysfs attribute to change a BAR's size without checking for capabilities, currently relying only on...
CVE-2026-97505 PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store()
In the Linux kernel, the following vulnerability has been resolved: PCI/sysfs: Add CAPSYSADMIN check to resourceresizestore Currently, the resourceresizestore allows writing to the resourceNresize sysfs attribute to change a BAR's size without checking for capabilities, currently relying only on...
CVE-2026-97505 PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store()
In the Linux kernel, the following vulnerability has been resolved: PCI/sysfs: Add CAPSYSADMIN check to resourceresizestore Currently, the resourceresizestore allows writing to the resourceNresize sysfs attribute to change a BAR's size without checking for capabilities, currently relying only on...
CVE-2026-97505
A vulnerability in the Linux kernel was identified within the PCI/sysfs interface. The __resource_resize_store() function allowed unprivileged users to modify a BAR's size by writing to the resourceN_resize sysfs attribute, as the system previously relied solely on file access checks rather than ...
CVE-2026-97505: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: PCI/sysfs: Add CAPSYSADMIN check to resourceresizestore Currently, the resourceresizestore allows writing to the resourceNresize sysfs attribute to change a BAR's size without checking for capabilities, currently relying only on...
CVE-2026-97505
In the Linux kernel, the following vulnerability has been resolved: PCI/sysfs: Add CAPSYSADMIN check to resourceresizestore Currently, the resourceresizestore allows writing to the resourceNresize sysfs attribute to change a BAR's size without checking for capabilities, currently relying only on...
Linux Distros Unpatched Vulnerability : CVE-2026-97505
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PCI/sysfs: Add CAPSYSADMIN check to resourceresizestore Currently, the resourceresizestore allows writing to the resourceNresize sysfs attribute to change a BAR...
Linux Distros Unpatched Vulnerability : CVE-2026-90315
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers Currently, the legacy I/O and memory sysfs handlers do not check...
DEBIAN-CVE-2026-90315
In the Linux kernel, the following vulnerability has been resolved: PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers Currently, the legacy I/O and memory sysfs handlers do not check securitylockeddownLOCKDOWNPCIACCESS, leaving the legacyio and legacymem files unprotected when the...
CVE-2026-90315
In the Linux kernel, the following vulnerability has been resolved: PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers Currently, the legacy I/O and memory sysfs handlers do not check securitylockeddownLOCKDOWNPCIACCESS, leaving the legacyio and legacymem files unprotected when the...
CVE-2026-90315 PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers
In the Linux kernel, the following vulnerability has been resolved: PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers Currently, the legacy I/O and memory sysfs handlers do not check securitylockeddownLOCKDOWNPCIACCESS, leaving the legacyio and legacymem files unprotected when the...
CVE-2026-90315 PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers
In the Linux kernel, the following vulnerability has been resolved: PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers Currently, the legacy I/O and memory sysfs handlers do not check securitylockeddownLOCKDOWNPCIACCESS, leaving the legacyio and legacymem files unprotected when the...
CVE-2026-90315
CVE-2026-90315 affects the Linux kernel's PCI/sysfs subsystem. The legacy I/O and memory handlers (pci_write_legacy_io() , pci_mmap_legacy_mem() , pci_mmap_legacy_io() ) fail to check security_locked_down(LOCKDOWN_PCI_ACCESS) , leaving the legacy_io and legacy_mem sysfs files unprotected during k...
EUVD-2026-81976
In the Linux kernel, the following vulnerability has been resolved: PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers Currently, the legacy I/O and memory sysfs handlers do not check securitylockeddownLOCKDOWNPCIACCESS, leaving the legacyio and legacymem files unprotected when the...
CVE-2026-89722
A flaw was found in the Linux kernel's PCI/sysfs component. A local user with root privileges could trigger an out-of-bounds read in the pciwritelegacyio function by writing to the legacyio sysfs file with a size less than four bytes. This improper handling of the write buffer can lead to memory...
AZL-100895 CVE-2026-89722 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: PCI/sysfs: Fix out-of-bounds read in pciwritelegacyio pciwritelegacyio loads 4 bytes from the kernfs write buffer regardless of how many bytes userspace wrote: if count != 1 && count != 2 && count != 4 return -EINVAL; return...
DEBIAN-CVE-2026-89722
In the Linux kernel, the following vulnerability has been resolved: PCI/sysfs: Fix out-of-bounds read in pciwritelegacyio pciwritelegacyio loads 4 bytes from the kernfs write buffer regardless of how many bytes userspace wrote: if count != 1 && count != 2 && count != 4 return -EINVAL; return...