CVE-2023-54326

misc: pci_endpoint_test: Free IRQs before removing the device

State: Published
Severity: 7.8 High
Published: Dec 30, 2025
Updated: Aug 5, 2026
Reserved: Dec 30, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

misc: pci_endpoint_test: Free IRQs before removing the device

In pci_endpoint_test_remove(), freeing the IRQs after removing the device creates a small race window for IRQs to be received with the test device memory already released, causing the IRQ handler to access invalid memory, resulting in an oops.

Free the device IRQs before removing the device to avoid this issue.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	e03327122e2c8e6ae4565ef5b3d3cbe4364546a1 to before fb7f8bdb886f2ebf35ee5edaf2bf5f02b063ddb7Affected e03327122e2c8e6ae4565ef5b3d3cbe4364546a1 to before dd2210379205fcd23a9d8869b0cef90e3770577cAffected e03327122e2c8e6ae4565ef5b3d3cbe4364546a1 to before cdf9a7e2cdc7a5464e3cc6d0b715ba2b1d215521Affected e03327122e2c8e6ae4565ef5b3d3cbe4364546a1 to before 14bdee38e96c7d37ca15e7bea50411eee25fe315Affected e03327122e2c8e6ae4565ef5b3d3cbe4364546a1 to before c2dba13bc0c62b79a3cbe4bfe5faa32231bf9b55Affected e03327122e2c8e6ae4565ef5b3d3cbe4364546a1 to before 38d12bcf4e2ce3d285eb29644a79a54f42040fabAffected e03327122e2c8e6ae4565ef5b3d3cbe4364546a1 to before f61b7634a3249d12b9daa36ffbdb9965b6f24c6cAffected
LinuxLinux	4.19Affected before 4.19Not affected 4.19.291 through 4.19.Not affected 5.4.251 through 5.4.Not affected 5.10.188 through 5.10.Not affected 5.15.121 through 5.15.Not affected 6.1.40 through 6.1.Not affected 6.4.5 through 6.4.Not affected 6.5 and laterNot affected

Product

Versions

LinuxLinux

e03327122e2c8e6ae4565ef5b3d3cbe4364546a1 to before fb7f8bdb886f2ebf35ee5edaf2bf5f02b063ddb7Affected
e03327122e2c8e6ae4565ef5b3d3cbe4364546a1 to before dd2210379205fcd23a9d8869b0cef90e3770577cAffected
e03327122e2c8e6ae4565ef5b3d3cbe4364546a1 to before cdf9a7e2cdc7a5464e3cc6d0b715ba2b1d215521Affected
e03327122e2c8e6ae4565ef5b3d3cbe4364546a1 to before 14bdee38e96c7d37ca15e7bea50411eee25fe315Affected
e03327122e2c8e6ae4565ef5b3d3cbe4364546a1 to before c2dba13bc0c62b79a3cbe4bfe5faa32231bf9b55Affected
e03327122e2c8e6ae4565ef5b3d3cbe4364546a1 to before 38d12bcf4e2ce3d285eb29644a79a54f42040fabAffected
e03327122e2c8e6ae4565ef5b3d3cbe4364546a1 to before f61b7634a3249d12b9daa36ffbdb9965b6f24c6cAffected

LinuxLinux

4.19Affected
before 4.19Not affected
4.19.291 through 4.19.*Not affected
5.4.251 through 5.4.*Not affected
5.10.188 through 5.10.*Not affected
5.15.121 through 5.15.*Not affected
6.1.40 through 6.1.*Not affected
6.4.5 through 6.4.*Not affected
6.5 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.