CVE-2026-90315

CVE-2026-90315 affects the Linux kernel's PCI/sysfs subsystem. The legacy I/O and memory handlers (pci_write_legacy_io() , pci_mmap_legacy_mem() , pci_mmap_legacy_io() ) fail to check security_locked_down(LOCKDOWN_PCI_ACCESS) , leaving the legacy_io and legacy_mem sysfs files unprotected during k...

EUVD-2026-81976

In the Linux kernel, the following vulnerability has been resolved: PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers Currently, the legacy I/O and memory sysfs handlers do not check securitylockeddownLOCKDOWNPCIACCESS, leaving the legacyio and legacymem files unprotected when the...

CVE-2026-90315 PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers

In the Linux kernel, the following vulnerability has been resolved: PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers Currently, the legacy I/O and memory sysfs handlers do not check securitylockeddownLOCKDOWNPCIACCESS, leaving the legacyio and legacymem files unprotected when the...

EUVD-2026-81826

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: release descriptor pools on probe failure The per-NUMA-node descriptor DMA pools are created lazily from nvmeinithctxcommon once the admin tag set is allocated, but they are only destroyed in nvmeremove via...

CVE-2026-90233 nvme-pci: release descriptor pools on probe failure

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: release descriptor pools on probe failure The per-NUMA-node descriptor DMA pools are created lazily from nvmeinithctxcommon once the admin tag set is allocated, but they are only destroyed in nvmeremove via...

CVE-2026-90233 nvme-pci: release descriptor pools on probe failure

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: release descriptor pools on probe failure The per-NUMA-node descriptor DMA pools are created lazily from nvmeinithctxcommon once the admin tag set is allocated, but they are only destroyed in nvmeremove via...

CVE-2026-90233

In the Linux kernel nvme-pci driver, per-NUMA-node descriptor DMA pools are created lazily during nvme_init_hctx_common() but are only released in nvme_remove(). Any probe failure occurring after the admin tag set is allocated unwinds through the out_disable label and nvme_pci_free_ctrl(), neithe...

CVE-2026-90332: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: ep: Flush cached MSI write before unmapping the iATU The MSI-X path already flushes any posted MSI-X write before tearing down its iATU mapping. That was added by commit c22533c66cca "PCI: dwc: ep: Flush MSI-X write...

PT-2026-94680

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the PCI dwc endpoint where the MSI path fails to flush posted MSI writes before unmapping the iATU Address Translation Unit entry. When the Endpoint driver detects a...

PT-2026-94751

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rtlwifi PCI component where the rtl pci probe function contains an incorrect goto label in its final error path. This causes the system to skip necessary cleanup...

CVE-2026-90233: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: release descriptor pools on probe failure The per-NUMA-node descriptor DMA pools are created lazily from nvmeinithctxcommon once the admin tag set is allocated, but they are only destroyed in nvmeremove via...

CVE-2026-90421: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: PCI: Fix UAF when probe runs concurrent to dyn ID removal Dynamic IDs are only guaranteed to be valid when dynids.lock is held, as removeidstore can free the node. Thus, make a copy in pcimatchdevice. Also, clarify that the id...

PT-2026-94769

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the PCI subsystem. This occurs when a probe runs concurrently with the removal of dynamic IDs, as the remove id store function can free the node whil...

PT-2026-94829

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ACPI PCI implementation where the acpi pci root is freed without clearing the driver data pointer. In the acpi pci root add function, if dmar device add fails duri...

CVE-2026-90315: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers Currently, the legacy I/O and memory sysfs handlers do not check securitylockeddownLOCKDOWNPCIACCESS, leaving the legacyio and legacymem files unprotected when the...

PT-2026-94663

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Legacy I/O and memory sysfs handlers fail to verify security locked downLOCKDOWN PCI ACCESS, leaving legacy io and legacy mem files unprotected during kernel lockdown. This allows a root...

PT-2026-94581

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the nvme-pci component when a probe failure happens after the admin tag set is allocated. The per-NUMA-node descriptor DMA pools, which are created lazily via the...

SUSE CVE-2026-89777

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: clear vdev-msiperm after freeing it on init failure vfiomsicaplen lazily allocates the per-device MSI permission table: vdev-msiperm = kmallocobjstruct permbits, GFPKERNELACCOUNT; if !vdev-msiperm return -ENOMEM; ret =...

AZL-101147 CVE-2026-89795 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: PCI: Allow per function PCI slots to fix slot reset on s390 On s390 systems, which use a machine level hypervisor, PCI devices are always accessed through a form of PCI pass-through which fundamentally operates on a per PCI...

DEBIAN-CVE-2026-89795

In the Linux kernel, the following vulnerability has been resolved: PCI: Allow per function PCI slots to fix slot reset on s390 On s390 systems, which use a machine level hypervisor, PCI devices are always accessed through a form of PCI pass-through which fundamentally operates on a per PCI...