High 7.8Published Dec 30, 2025

CVE-2023-54326misc: pci_endpoint_test: Free IRQs before removing the device

Updated under an hour ago (Oct 28, 2026, 3:50 AM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: misc: pci_endpoint_test: Free IRQs before removing the device In pci_endpoint_test_remove(), freeing the IRQs after removing the device creates a small race window for IRQs to be received with the test device memory already released, causing the IRQ handler to access invalid memory, resulting in an oops. Free the device IRQs before removing the device to avoid this issue.

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: Aug 5, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from e03327122e2c8e6ae4565ef5b3d3cbe4364546a1 before fb7f8bdb886f2ebf35ee5edaf2bf5f02b063ddb7; from e03327122e2c8e6ae4565ef5b3d3cbe4364546a1 before dd2210379205fcd23a9d8869b0cef90e3770577c; from e03327122e2c8e6ae4565ef5b3d3cbe4364546a1 before cdf9a7e2cdc7a5464e3cc6d0b715ba2b1d215521; from e03327122e2c8e6ae4565ef5b3d3cbe4364546a1 before 14bdee38e96c7d37ca15e7bea50411eee25fe315; from e03327122e2c8e6ae4565ef5b3d3cbe4364546a1 before c2dba13bc0c62b79a3cbe4bfe5faa32231bf9b55; from e03327122e2c8e6ae4565ef5b3d3cbe4364546a1 before 38d12bcf4e2ce3d285eb29644a79a54f42040fab; from e03327122e2c8e6ae4565ef5b3d3cbe4364546a1 before f61b7634a3249d12b9daa36ffbdb9965b6f24c6c	CNA record

References

References

https://git.kernel.org/stable/c/fb7f8bdb886f2ebf35ee5edaf2bf5f02b063ddb7
https://git.kernel.org/stable/c/dd2210379205fcd23a9d8869b0cef90e3770577c
https://git.kernel.org/stable/c/cdf9a7e2cdc7a5464e3cc6d0b715ba2b1d215521
https://git.kernel.org/stable/c/14bdee38e96c7d37ca15e7bea50411eee25fe315
https://git.kernel.org/stable/c/c2dba13bc0c62b79a3cbe4bfe5faa32231bf9b55
https://git.kernel.org/stable/c/38d12bcf4e2ce3d285eb29644a79a54f42040fab
https://git.kernel.org/stable/c/f61b7634a3249d12b9daa36ffbdb9965b6f24c6c

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.