The vulnerability of the Linux operating system’s thermal core component, which allows a hacker to trigger a service failure

The vulnerability of the Linux operating system’s thermal kernel component is related to errors in resource management in the procthermalpciremove function. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the _isst_if_getpci_dev() function (drivers/platform/x86/intel/speed_select_if/isst_if_common.c) in the Linux operating system’s kernel allows a attacker to cause a service failure.

The vulnerability of the isstifgetpcidev function drivers/platform/x86/intel/speedselectif/isstifcommon.c in the Linux kernel is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the snd_acp_resume() function in the sound/soc/amd/acp/acp-pci.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the sndacpresume function in the sound/soc/amd/acp/acp-pci.c module of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the vfio_intx_enable() function in the drivers/vfio/pci/vfio_pci_intrs.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the vfiointxenable function in the drivers/vfio/pci/vfiopciintrs.c module of the Linux kernel is related to improper memory release before deleting the last reference „memory leak“. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `ks_pcie_setup_rc_app regs()` function in the drivers/pci/controller/dwc/pci-keystone.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the kspciesetuprcapp regs function in the drivers/pci/controller/dwc/pci-keystone.c kernel module of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the pci_epf_test_core_init() function in the drivers/pci/endpoint/functions/pci-epf-test.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the pciepftestcoreinit function in the drivers/pci/endpoint/functions/pci-epf-test.c module of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

kernel: PCI/PM: Drain runtime-idle callbacks before driver removal

A vulnerability was found in the PCI subsystem in the Linux kernel, where runtime-idle callbacks are not always drained before a PCI driver is removed. If these callbacks are still active when the driver is removed, it could result in system instability or crashes...

PT-2025-18415

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue is related to the access of the PCI config space via pci ops::read and pci ops::write, which are low-level hardware...

Fedora 40 : xen (2025-20bd6d94b9)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-20bd6d94b9 advisory. deadlock potential with VT-d and legacy PCI device pass-through XSA-467, CVE-2025-1713 Tenable has extracted the preceding description block directly from th...

PT-2025-20494

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A long-standing race condition in the Linux kernel's PCI hotplug functionality can lead to a deadlock when hot-removing nested PCI hotplug ports. This issue occurs when a parent hotplug...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-56756)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56756 advisory. - In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix freeing of the HMB...

The vulnerability of the rtlpciprobe() function in the drivers/net/wireless/realtek/rtlwifi/pci.c file of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the rtlpciprobe function in the drivers/net/wireless/realtek/rtlwifi/pci.c file of Linux kernel systems is related to the lack of memory release after the effective lifespan of the function. Exploiting this vulnerability can allow an attacker to cause a service failure...

Azure Linux 3.0 Security Update: kernel (CVE-2024-56745)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56745 advisory. - In the Linux kernel, the following vulnerability has been resolved: PCI: Fix resetmethodstore memory leak In...

MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a

...

PT-2025-18394

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the pci endpoint test module. The issue occurs when devm request irq fails with an error in pci endpoint test request ir...

PT-2025-25843

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double free issue in the Linux kernel has been resolved. The issue occurred during the initialization of the Endpoint driver, specifically when handling the PERST deassertion. The pci...

What PCI DSS v4 Really Means – Lessons from A&F Compliance Journey

Access on-demand webinar here Avoid a $100,000/month Compliance Disaster March 31, 2025: The Clock is Ticking. What if a single overlooked script could cost your business $100,000 per month in non-compliance fines? PCI DSS v4 is coming, and businesses handling payment card data must be prepared...

AZL-69009 CVE-2025-21831 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1 commit 9d26d3a8f1b0 "PCI: Put PCIe ports into D3 during suspend" sets the policy that all PCIe ports are allowed to use D3. When the system is suspended if the port...

DEBIAN-CVE-2025-21831

In the Linux kernel, the following vulnerability has been resolved: PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1 commit 9d26d3a8f1b0 "PCI: Put PCIe ports into D3 during suspend" sets the policy that all PCIe ports are allowed to use D3. When the system is suspended if the port...

UBUNTU-CVE-2025-21831

In the Linux kernel, the following vulnerability has been resolved: PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1 commit 9d26d3a8f1b0 "PCI: Put PCIe ports into D3 during suspend" sets the policy that all PCIe ports are allowed to use D3. When the system is suspended if the port...