CVE-2026-53067: PCI: endpoint: pci-ep-msi: Fix error unwind and prevent double alloc
In the Linux kernel, the following vulnerability has been resolved:
PCI: endpoint: pci-ep-msi: Fix error unwind and prevent double alloc
pciepfallocdoorbell() stores the allocated doorbell message array in epf->dbmsg/epf->numdb before requesting MSI vectors. If MSI allocation fails, the array is freed but the EPF state may still point to freed memory.
Clear epf->dbmsg and epf->numdb on the MSI allocation failure path so that later cleanup cannot double-free the array and callers can retry allocation.
Also return -EBUSY when doorbells have already been allocated to prevent leaking or overwriting an existing allocation.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53067?
The severity of CVE-2026-53067 is rated as 21.
How do I fix CVE-2026-53067?
To fix CVE-2026-53067, update your Linux kernel to the latest version that includes the patch.
What does CVE-2026-53067 affect?
CVE-2026-53067 affects the PCI endpoint implementation in the Linux kernel.
What are the potential consequences of CVE-2026-53067?
The potential consequences of CVE-2026-53067 include resource leaks and system instability due to improper error handling.
When was CVE-2026-53067 published?
CVE-2026-53067 was published on June 24, 2026.