PT-2026-43876 · Linux · Linux

Published 2026-05-27 · Updated 2026-05-27 · CVE-2026-46009

Mitre

In the Linux kernel, the following vulnerability has been resolved:

PCI: endpoint: pci-epf-ntb: Remove duplicate resource teardown

epf ntb epc destroy() duplicates the teardown that the caller is supposed to do later. This leads to an oops when .allow link fails or when .drop link is performed. Remove the helper.

Also drop pci epc put(). EPC device refcounting is tied to configfs EPC group lifetime, and pci epc put() in the .drop link path is sufficient.

Related Identifiers

CVE-2026-46009

Affected Products

Linux

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-46009 · Security Note
• https://git.kernel.org/stable/c/65fc57c8b8f0b31be62be291cb1bb01755cec85d · Note
• https://git.kernel.org/stable/c/e813c95e4c8edd31599081e6356e20ada30e266d · Note
• https://git.kernel.org/stable/c/72099f015d3c77bf2eb703d1aab113bd7a60915a · Note
• https://git.kernel.org/stable/c/3446beddba450c8d6f9aca2f028712ac527fead3 · Note
• https://git.kernel.org/stable/c/756ca5e7ed22d9045bb4de4c981f9149278d5cd3 · Note