CVE-2026-97946

x86/amd_node: Fix PCI device reference counting in amd_smn_init()

State
Published
Severity
Not scored
Published
Sep 25, 2026
Updated
Oct 19, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

x86/amd_node: Fix PCI device reference counting in amd_smn_init()

The local "root" pointer is a temporary variable used during the device search. Therefore, refcount related to the search iterators should be cleaned up after the search is complete.

Use the __free() cleanup macro to ensure the refcount is decremented when the temporary pointer goes out of scope.

Additionally, increment the refcount when caching a root pointer. This ensures the in-use refcount is separate from the temporary search refcounting.

Finally, drop the redundant "root = NULL" before the second search loop. The pci_get_class() iterator always decrements the refcount of its "from" argument, so the first loop can only fall through with "root" already NULL.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 0a4b61d9c2e496b5f0a10e29e355a1465c8738bb to before 84e3a71d11d8593c127b468d75b2653af5074f81Affected
  • 0a4b61d9c2e496b5f0a10e29e355a1465c8738bb to before aa2a4277ad42fd8f918c6dc652473946a253f7b0Affected
  • 0a4b61d9c2e496b5f0a10e29e355a1465c8738bb to before 27600805e62f800bacf990354632eae4e487d34cAffected
  • c4ad899a33198ab6335732c769835d035e66894aAffected
  • 6.17.8 to before 6.18Affected
LinuxLinux
  • 6.18Affected
  • before 6.18Not affected
  • 6.18.53 through 6.18.*Not affected
  • 7.2.7 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.