CVE-2026-46009
Description
A flaw was found in the Linux kernel, specifically within the PCI endpoint NTB (Non-Transparent Bridge) module. A programming error involving a duplicate resource teardown in the epf_ntb_epc_destroy() function can lead to a kernel 'oops', which is a system crash. This issue can be triggered during PCI link operations, such as allow_link or drop_link, potentially resulting in a denial of service for the affected system.
Understanding the Weakness (CWE)
Integrity,Confidentiality,Availability,Other
Technical Impact: DoS: Crash, Exit, or Restart; Execute Unauthorized Code or Commands; Modify Memory; Other
Depending on the locking being used, an unlock operation might not have any adverse effects. When effects exist, the most common consequence will be a corruption of the state of the product, possibly leading to a crash or exit; depending on the implementation of the unlocking, memory corruption or code execution could occur.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
