CVE-2026-53051: PCI: tegra194: Fix CBB timeout caused by DBI access before core power-on

Published Jun 24, 2026
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

PCI: tegra194: Fix CBB timeout caused by DBI access before core power-on

When PERST# is deasserted twice (assert -> deassert -> assert -> deassert), a CBB (Control Backbone) timeout occurs at DBI register offset 0x8bc (PCIEMISCCONTROL1OFF). This happens because pciepcdeinitnotify() and dwpcieepcleanup() are called before resetcontroldeassert() powers on the controller core.

The call chain that causes the timeout:

pexepeventpexrstdeassert() pciepcdeinitnotify() pciepftestepcdeinit() pciepftestclearbar() pciepcclearbar() dwpcieepclearbar() dwpcieepresetbar() dwpciedbirowren() <- Accesses 0x8bc DBI register resetcontroldeassert(pcie->corerst) <- Core powered on HERE

The DBI registers, including PCIEMISCCONTROL1OFF (0x8bc), are only accessible after the controller core is powered on via resetcontroldeassert(pcie->corerst). Accessing them before this point results in a CBB timeout because the hardware is not yet operational.

Fix this by moving pciepcdeinitnotify() and dwpcieepcleanup() to after resetcontroldeassert(pcie->corerst), ensuring the controller is fully powered on before any DBI register accesses occur.

Affected Software

5 affected components
Linux Linux kernel
Linux Linux kernel>=6.11.11<6.12
Linux Linux kernel>=6.12.2<6.12.91
Linux Linux kernel>=6.13<6.18.33
Linux Linux kernel>=6.19<7.0.10

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade Linux kernel (PCI: tegra194) to a version that resolves this vulnerability.

    Patch PCI: tegra194: Fix CBB timeout caused by DBI access before core power-on

Event History

Jun 24, 2026
CVE Published
via MITRE·04:29 PM
Data Sourced
via MITRE·04:29 PM
Description
Data Sourced
via NVD·05:17 PM
RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2026-53051?

CVE-2026-53051 has a risk rating of 14, indicating a significant impact if exploited.

2

How do I fix CVE-2026-53051?

To resolve CVE-2026-53051, update your Linux kernel to the latest version where this vulnerability has been patched.

3

What systems are affected by CVE-2026-53051?

CVE-2026-53051 affects systems running an affected version of the Linux kernel with PCI: tegra194 capabilities.

4

What are the symptoms of CVE-2026-53051 exploitation?

Exploitation of CVE-2026-53051 may result in a CBB (Control Backbone) timeout during DBI access before core power-on.

5

Is CVE-2026-53051 actively being exploited?

As of now, there is no information indicating active exploitation of CVE-2026-53051, but it is advisable to apply patches promptly.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203