← Database

CVE-2026-46009

MEDIUM CVSS: 5.5 Published: 2026-05-27 Modified: 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: pci-epf-ntb: Remove duplicate resource teardown epf_ntb_epc_destroy() duplicates the teardown that the caller is supposed to do later. This leads to an oops when .allow_link fails or when .drop_link is performed. Remove the helper. Also drop pci_epc_put(). EPC device refcounting is tied to configfs EPC group lifetime, and pci_epc_put() in the .drop_link path is sufficient.

Affected Platforms

Linux Linux Kernel

Weakness Type

NVD-CWE-noinfo

References