PT-2026-20425 · Linux+1 · Linux Kernel+1

Published

2026-01-01

·

Updated

2026-05-22

·

CVE-2026-23213

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The Linux kernel contains a flaw related to memory management during System Management Unit (SMU) Mode 1 reset. During the reset cycle, the Application Specific Integrated Circuit (ASIC) becomes temporarily inaccessible via Peripheral Component Interconnect Express (PCIe). Attempts to access memory-mapped I/O (MMIO) registers during this period, potentially from interrupt handlers or other driver threads, can lead to Non-Maskable Interrupt (NMI) panics or system hangs. The issue is addressed by setting the no hw access flag to true immediately after triggering the reset, preventing further register accesses while the device is offline. A memory barrier smp mb() is added to ensure the flag update is visible across all cores before the driver enters a sleep or wait state.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

AZL-77858
CVE-2026-23213
ECHO-D3EA-32FC-932F
OPENSUSE-SU-2026:20416-1
SUSE-SU-2026:0962-1
SUSE-SU-2026:1081-1
SUSE-SU-2026:20667-1
SUSE-SU-2026:20720-1
SUSE-SU-2026:20838-1
SUSE-SU-2026:20845-1
SUSE-SU-2026:20876-1
SUSE-SU-2026:20931-1
SUSE-SU-2026:21284-1
USN-8278-1
USN-8289-1
USN-8296-1

Affected Products

Linux Kernel
Ubuntu