CVE-2026-90421

In the Linux kernel, the following vulnerability has been resolved: PCI: Fix UAF when probe runs concurrent to dyn ID removal Dynamic IDs are only guaranteed to be valid when dynids.lock is held, as remove_id_store() can free the node. Thus, make a copy in pci_match_device(). Also, clarify that the id parameter is only valid during probe.
CVSS

No CVSS.

Configurations

No configuration.

History

17 Sep 2026, 17:17

Type Values Removed Values Added
New CVE

Information

Published : 2026-09-17 17:17

Updated : 2026-09-17 17:17


NVD link : CVE-2026-90421

Mitre link : CVE-2026-90421

CVE.ORG link : CVE-2026-90421


JSON object : View

Products Affected

No product.

CWE

No CWE.