Riskcovery

CVE-2026-90421

PCI: Fix UAF when probe runs concurrent to dyn ID removal

State
Published
Severity
Not scored
Published
Sep 17, 2026
Updated
Oct 30, 2026
Reserved
Sep 11, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

PCI: Fix UAF when probe runs concurrent to dyn ID removal

Dynamic IDs are only guaranteed to be valid when dynids.lock is held, as remove_id_store() can free the node. Thus, make a copy in pci_match_device(). Also, clarify that the id parameter is only valid during probe.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 0994375e9614f78657031e04e30019b9cdb62795 to before 74133e74619d108eeaaa787d78906314d7a7b077Affected
  • 0994375e9614f78657031e04e30019b9cdb62795 to before d867db0a2602919510f346bc555f7b3093f6b6ccAffected
  • 0994375e9614f78657031e04e30019b9cdb62795 to before 2cbcb0819c6367e1d5b0792a960594cc19576e23Affected
  • 0994375e9614f78657031e04e30019b9cdb62795 to before c36816feff47f676dcc51919777d483f4146c1eeAffected
  • 0994375e9614f78657031e04e30019b9cdb62795 to before 42a5661ff7e4c7d3c5025d0f8e5079fb5479ea49Affected
  • 0994375e9614f78657031e04e30019b9cdb62795 to before 3ffc4c9690c33ee28cdb3d0182b12f9c623e3accAffected
LinuxLinux
  • 2.6.30Affected
  • before 2.6.30Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.114 through 6.12.*Not affected
  • 6.18.57 through 6.18.*Not affected
  • 7.2.6 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.