High 7.8Published Sep 18, 2024

CVE-2024-46750PCI: Add missing bridge lock to pci_bus_lock()

Updated under an hour ago (Oct 27, 2026, 10:00 PM ET)

Does this affect you?

It affects Linux and 8 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: PCI: Add missing bridge lock to pci_bus_lock() One of the true positives that the cfg_access_lock lockdep effort identified is this sequence: WARNING: CPU: 14 PID: 1 at drivers/pci/pci.c:4886 pci_bridge_secondary_bus_reset+0x5d/0x70 RIP: 0010:pci_bridge_secondary_bus_reset+0x5d/0x70 Call Trace: <TASK> ? __warn+0x8c/0x190 ? pci_bridge_secondary_bus_reset+0x5d/0x70 ? report_bug+0x1f8/0x200 ? handle_bug+0x3c/0x70 ? exc_invalid_op+0x18/0x70 ? asm_exc_invalid_op+0x1a/0x20 ? pci_bridge_secondary_bus_reset+0x5d/0x70 pci_reset_bus+0x1d8/0x270 vmd_probe+0x778/0xa10 pci_device_probe+0x95/0x120 Where pci_reset_bus() users are triggering unlocked secondary bus resets. Ironically pci_bus_reset(), several calls down from pci_reset_bus(), uses pci_bus_lock() before issuing the reset which locks everything *but* the bridge itself. For the same motivation as adding: bridge = pci_upstream_bridge(dev); if (bridge) pci_dev_lock(bridge); to pci_reset_function() for the "bus" and "cxl_bus" reset cases, add pci_dev_lock() for @bus->self to pci_bus_lock(). [bhelgaas: squash in recursive locking deadlock fix from Keith Busch: https://lore.kernel.org/r/20240711193650.701834-1-kbusch@meta.com]

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 14, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 090a3c5322e900f468b3205b76d0837003ad57b2 before 0790b89c7e911003b8c50ae50e3ac7645de1fae9; from 090a3c5322e900f468b3205b76d0837003ad57b2 before df77a678c33871a6e4ac5b54a71662f1d702335b; from 090a3c5322e900f468b3205b76d0837003ad57b2 before e2355d513b89a2cb511b4ded0deb426cdb01acd0; 090a3c5322e900f468b3205b76d0837003ad57b2 builds before 04e85a3285b0e5c5af6fd2c0fd6e95ffecc01945; from 090a3c5322e900f468b3205b76d0837003ad57b2 before 7253b4fed46471cc247c6cacefac890a8472c083; 090a3c5322e900f468b3205b76d0837003ad57b2 builds before 78c6e39fef5c428960aff742149bba302dd46f5a; 090a3c5322e900f468b3205b76d0837003ad57b2 builds before 81c68e218ab883dfa368460a59b674084c0240da; from 090a3c5322e900f468b3205b76d0837003ad57b2 before a4e772898f8bf2e7e1cf661a12c60a5612c4afab	CNA record
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.0 before V3.1.5	CISA ADP
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518f_4_pn_dp_mfp (from the name)	from V3.1.0 before V3.1.5	CISA ADP
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name)	before V1.1.1	CISA ADP
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP siemens:siplus_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.0 before V3.1.5	CISA ADP
Siemens RUGGEDCOM RST2428P siemens:ruggedcom_rst2428p (from the name)	before V3.2	CISA ADP
Siemens SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family siemens:scalance_xc_300_xr_300_xc_400_xr_500wg_xr_500_family (from the name)	before V3.2	CISA ADP
Siemens SCALANCE XCM-/XRM-/XCH-/XRH-300 family siemens:scalance_xcm_xrm_xch_xrh_300_family (from the name)	before V3.2	CISA ADP
linux linux_kernel linux:linux_kernel	before 4.19.322; from 4.20 before 5.4.284; from 5.5 before 5.10.226; from 5.11 before 5.15.167; from 5.16 before 6.1.110; from 6.2 before 6.6.51; from 6.7 before 6.10.10	NVD

References

References

https://git.kernel.org/stable/c/0790b89c7e911003b8c50ae50e3ac7645de1fae9	patch
https://git.kernel.org/stable/c/df77a678c33871a6e4ac5b54a71662f1d702335b	patch
https://git.kernel.org/stable/c/e2355d513b89a2cb511b4ded0deb426cdb01acd0	patch
https://git.kernel.org/stable/c/04e85a3285b0e5c5af6fd2c0fd6e95ffecc01945	patch
https://git.kernel.org/stable/c/7253b4fed46471cc247c6cacefac890a8472c083	patch
https://git.kernel.org/stable/c/78c6e39fef5c428960aff742149bba302dd46f5a	patch
https://git.kernel.org/stable/c/81c68e218ab883dfa368460a59b674084c0240da	patch
https://git.kernel.org/stable/c/a4e772898f8bf2e7e1cf661a12c60a5612c4afab	patch
https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
1–10 of 13

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.