CVE-2026-97946: x86/amd_node: Fix PCI device reference counting in amd_smn_init()

Published Sep 25, 2026
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

x86/amdnode: Fix PCI device reference counting in amdsmninit()

The local "root" pointer is a temporary variable used during the device search. Therefore, refcount related to the search iterators should be cleaned up after the search is complete.

Use the free() cleanup macro to ensure the refcount is decremented when the temporary pointer goes out of scope.

Additionally, increment the refcount when caching a root pointer. This ensures the in-use refcount is separate from the temporary search refcounting.

Finally, drop the redundant "root = NULL" before the second search loop. The pcigetclass() iterator always decrements the refcount of its "from" argument, so the first loop can only fall through with "root" already NULL.

Affected Software

1 affected component
Linux Linux kernel

Event History

Sep 25, 2026
CVE Published
via MITRE·10:22 AM
Data Sourced
via MITRE·10:22 AM
Description
Data Sourced
via NVD·11:17 AM
Description

Frequently Asked Questions

1

What systems are affected by this issue?

The affected software is the Linux kernel. The issue is in the x86 AMD node code path, specifically amd_smn_init(), and concerns PCI device reference counting.

2

What is the immediate mitigation if an update cannot be applied?

The provided information does not identify a configuration workaround or operational mitigation. Apply a Linux kernel version containing one of the referenced stable fixes when available.

3

How can I determine whether my kernel includes the fix?

Check whether your kernel source or vendor update includes the amd_smn_init() PCI reference-counting changes from the referenced stable commits. The data provided does not include affected or fixed kernel version numbers.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203