CVE-2026-93822: PCI: iproc: Protect root bus removal with rescan lock
In the Linux kernel, the following vulnerability has been resolved:
PCI: iproc: Protect root bus removal with rescan lock
Hold the pcirescanremovelock lock while stopping and removing a root bus to avoid racing with concurrent rescan or hotplug operations triggered via sysfs. Such races may lead to use-after-free issues or system crashes.
[bhelgaas: commit log]
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Hold the pci_rescan_remove_lock while stopping and removing a root bus to prevent races with concurrent PCI rescan or hotplug operations.
Event History
Frequently Asked Questions
What conditions are needed to trigger this issue?
The race requires root bus removal to occur concurrently with a PCI rescan or hotplug operation initiated through sysfs. The resulting race can cause a use-after-free condition or a system crash.
Who is most exposed to this vulnerability?
Systems using the Linux kernel PCI iProc driver are relevant where root bus removal can overlap with sysfs-triggered PCI rescan or hotplug activity. The provided information does not identify a specific default configuration or affected kernel versions.
What is the mitigation if an update cannot be applied immediately?
Avoid concurrent root bus removal and sysfs-triggered PCI rescan or hotplug operations. The resolved change protects root bus removal by holding the pci_rescan_remove_lock during the stop and removal process.