CVE-2026-93818

The Linux kernel contains a vulnerability in the PCI subsystem where a race condition can occur during the stopping and removal of a root bus. The issue is caused by failing to hold the pci_rescan_remove_lock during these operations, which may lead to use-after-free issues or system crashes when ...

CVE-2026-93265

The Linux kernel contains a vulnerability in the PCI/pwrctrl: tc9563 driver related to how it parses the integrated Ethernet MAC Endpoint node for DSP3 . The underlying cause is that the existing logic attempts to parse both physical functions of the Endpoint device, even though they share the sa...

EUVD-2026-86137

In the Linux kernel, the following vulnerability has been resolved: PCI/pwrctrl: tc9563: Fix parsing the integrated Ethernet MAC Endpoint node DSP3 has an integrated Ethernet MAC Endpoint which has its own set of config registers for configuring settings such as ASPM. The Endpoint device has two...

CVE-2026-93265 PCI/pwrctrl: tc9563: Fix parsing the integrated Ethernet MAC Endpoint node

In the Linux kernel, the following vulnerability has been resolved: PCI/pwrctrl: tc9563: Fix parsing the integrated Ethernet MAC Endpoint node DSP3 has an integrated Ethernet MAC Endpoint which has its own set of config registers for configuring settings such as ASPM. The Endpoint device has two...

CVE-2026-93265 PCI/pwrctrl: tc9563: Fix parsing the integrated Ethernet MAC Endpoint node

In the Linux kernel, the following vulnerability has been resolved: PCI/pwrctrl: tc9563: Fix parsing the integrated Ethernet MAC Endpoint node DSP3 has an integrated Ethernet MAC Endpoint which has its own set of config registers for configuring settings such as ASPM. The Endpoint device has two...

CVE-2026-93206 PCI/proc: Use file_ns_capable() when checking config space read access

In the Linux kernel, the following vulnerability has been resolved: PCI/proc: Use filenscapable when checking config space read access procbuspciread decides how much of the config space is readable based on capableCAPSYSADMIN, which checks the credentials of the task calling read, not the...

CVE-2026-93206

The Linux kernel contains a vulnerability in the procfs interface where proc_bus_pci_read() incorrectly checks for CAP_SYS_ADMIN using the credentials of the task calling read() rather than the process that opened the file. This inconsistency with the sysfs behavior allows a privileged process to...

CVE-2026-93206 PCI/proc: Use file_ns_capable() when checking config space read access

In the Linux kernel, the following vulnerability has been resolved: PCI/proc: Use filenscapable when checking config space read access procbuspciread decides how much of the config space is readable based on capableCAPSYSADMIN, which checks the credentials of the task calling read, not the...

CVE-2026-93206

In the Linux kernel, the following vulnerability has been resolved: PCI/proc: Use filenscapable when checking config space read access procbuspciread decides how much of the config space is readable based on capableCAPSYSADMIN, which checks the credentials of the task calling read, not the...

PT-2026-104975

In the Linux kernel, the following vulnerability has been resolved: PCI/proc: Use file ns capable when checking config space read access proc bus pci read decides how much of the config space is readable based on capableCAP SYS ADMIN, which checks the credentials of the task calling read, not the...

CVE-2026-97505

In the Linux kernel, the following vulnerability has been resolved: PCI/sysfs: Add CAPSYSADMIN check to resourceresizestore Currently, the resourceresizestore allows writing to the resourceNresize sysfs attribute to change a BAR's size without checking for capabilities, currently relying only on...

PT-2026-97952

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds OOB access issue exists in the PCI power control component for tc9563. The problem occurs when parsing the integrated Ethernet MAC Endpoint node under DSP3. Because the...

CVE-2026-93820

In the Linux kernel, the following vulnerability has been resolved: PCI: rockchip: Protect root bus removal with rescan lock Hold the pcirescanremovelock lock while stopping and removing a root bus to avoid racing with concurrent rescan or hotplug operations triggered via sysfs. Such races may le...

CVE-2026-93821

In the Linux kernel, the following vulnerability has been resolved: PCI: altera: Protect root bus removal with rescan lock Hold the pcirescanremovelock lock while stopping and removing a root bus to avoid racing with concurrent rescan or hotplug operations triggered via sysfs. Such races may lead...

CVE-2026-93818

In the Linux kernel, the following vulnerability has been resolved: PCI: plda: Protect root bus removal with rescan lock Hold the pcirescanremovelock lock while stopping and removing a root bus to avoid racing with concurrent rescan or hotplug operations triggered via sysfs. Such races may lead t...

CVE-2026-93819

In the Linux kernel, the following vulnerability has been resolved: PCI: mediatek: Protect root bus removal with rescan lock Hold the pcirescanremovelock lock while stopping and removing a root bus to avoid racing with concurrent rescan or hotplug operations triggered via sysfs. Such races may le...

PT-2026-98124

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the PCI sysfs implementation where the resource resize store function allows writing to the resourceN resize sysfs attribute to change a Base Address Register BAR size...

PT-2026-98018

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists when stopping and removing a root bus in the PCI plda component. This occurs when the pci rescan remove lock lock is not held, allowing concurrent rescan or hotpl...

PT-2026-98019

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the PCI mediatek component when stopping and removing a root bus. The failure to hold the pci rescan remove lock lock during this process allows concurrent...

CVE-2026-93821: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: PCI: altera: Protect root bus removal with rescan lock Hold the pcirescanremovelock lock while stopping and removing a root bus to avoid racing with concurrent rescan or hotplug operations triggered via sysfs. Such races may lead...