CVE-2026-46009

PCI: endpoint: pci-epf-ntb: Remove duplicate resource teardown

State: Published
Severity: Not scored
Published: May 27, 2026
Updated: Jun 14, 2026
Reserved: May 13, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

PCI: endpoint: pci-epf-ntb: Remove duplicate resource teardown

epf_ntb_epc_destroy() duplicates the teardown that the caller is supposed to do later. This leads to an oops when .allow_link fails or when .drop_link is performed. Remove the helper.

Also drop pci_epc_put(). EPC device refcounting is tied to configfs EPC group lifetime, and pci_epc_put() in the .drop_link path is sufficient.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	8b821cf761503b80d0bd052f932adfe1bc1a0088 to before c3029721b84f59e790285ad27544ed5d3cb0f2a6Affected 8b821cf761503b80d0bd052f932adfe1bc1a0088 to before c72f6a7ea638f95c486a5cfd86e567b646027687Affected 8b821cf761503b80d0bd052f932adfe1bc1a0088 to before 72099f015d3c77bf2eb703d1aab113bd7a60915aAffected 8b821cf761503b80d0bd052f932adfe1bc1a0088 to before 756ca5e7ed22d9045bb4de4c981f9149278d5cd3Affected 8b821cf761503b80d0bd052f932adfe1bc1a0088 to before 65fc57c8b8f0b31be62be291cb1bb01755cec85dAffected 8b821cf761503b80d0bd052f932adfe1bc1a0088 to before e813c95e4c8edd31599081e6356e20ada30e266dAffected 8b821cf761503b80d0bd052f932adfe1bc1a0088 to before 3446beddba450c8d6f9aca2f028712ac527fead3Affected
LinuxLinux	5.12Affected before 5.12Not affected 5.15.209 through 5.15.Not affected 6.1.175 through 6.1.Not affected 6.6.140 through 6.6.Not affected 6.12.86 through 6.12.Not affected 6.18.27 through 6.18.Not affected 7.0.4 through 7.0.Not affected 7.1 and laterNot affected

Product

Versions

LinuxLinux

8b821cf761503b80d0bd052f932adfe1bc1a0088 to before c3029721b84f59e790285ad27544ed5d3cb0f2a6Affected
8b821cf761503b80d0bd052f932adfe1bc1a0088 to before c72f6a7ea638f95c486a5cfd86e567b646027687Affected
8b821cf761503b80d0bd052f932adfe1bc1a0088 to before 72099f015d3c77bf2eb703d1aab113bd7a60915aAffected
8b821cf761503b80d0bd052f932adfe1bc1a0088 to before 756ca5e7ed22d9045bb4de4c981f9149278d5cd3Affected
8b821cf761503b80d0bd052f932adfe1bc1a0088 to before 65fc57c8b8f0b31be62be291cb1bb01755cec85dAffected
8b821cf761503b80d0bd052f932adfe1bc1a0088 to before e813c95e4c8edd31599081e6356e20ada30e266dAffected
8b821cf761503b80d0bd052f932adfe1bc1a0088 to before 3446beddba450c8d6f9aca2f028712ac527fead3Affected

LinuxLinux

5.12Affected
before 5.12Not affected
5.15.209 through 5.15.*Not affected
6.1.175 through 6.1.*Not affected
6.6.140 through 6.6.*Not affected
6.12.86 through 6.12.*Not affected
6.18.27 through 6.18.*Not affected
7.0.4 through 7.0.*Not affected
7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.