CVE-2026-97479: driver core: Avoid warning when removing a device while its supplier is unbinding
driver core: Avoid warning when removing a device while its supplier is unbinding
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.1.191 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.6.160 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.12.114 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.18.53 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 7.2.6-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 7.2.12-1Fixed in 7.2.14-1
Event History
Frequently Asked Questions
What conditions are required to trigger the warning?
It occurs during driver removal when a consumer device is removed while its supplier's device-link status is not DL_DEV_DRIVER_BOUND, and the link does not have the DL_FLAG_SYNC_STATE_ONLY flag set. The reported topology involves chained consumer/supplier device links during PCI driver unregistration.
Is this an indication that a system has already been affected?
A system is affected if it emits the described WARNING from __device_links_no_driver during driver removal or unbinding. The provided data describes a kernel warning condition and does not identify a separate externally observable compromise indicator.
Which component is implicated by the reported call trace?
The call trace shows the issue during removal of the lan966x_pci driver, through PCI driver unregistration and driver-core device-link cleanup. The vulnerability is listed for the Linux kernel.