Medium 5.5Published Apr 24, 2026

CVE-2026-31594PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown

Updated under an hour ago (Oct 27, 2026, 11:50 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown epf_ntb_epc_destroy() duplicates the teardown that the caller is supposed to perform later. This leads to an oops when .allow_link fails or when .drop_link is performed. The following is an example oops of the former case: Unable to handle kernel paging request at virtual address dead000000000108 [...] [dead000000000108] address between user and kernel address ranges Internal error: Oops: 0000000096000044 [#1] SMP [...] Call trace: pci_epc_remove_epf+0x78/0xe0 (P) pci_primary_epc_epf_link+0x88/0xa8 configfs_symlink+0x1f4/0x5a0 vfs_symlink+0x134/0x1d8 do_symlinkat+0x88/0x138 __arm64_sys_symlinkat+0x74/0xe0 [...] Remove the helper, and drop pci_epc_put(). EPC device refcounting is tied to the configfs EPC group lifetime, and pci_epc_put() in the .drop_link path is sufficient.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Jun 14, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from e2b6ef72b7aea9d7d480d2df499bcd1c93247abb before 305a0674bc552bfcc3231e23fb91cf4f62aec168; from e35f56bb03304abc92c928b641af41ca372966bb before b261027a1a235d8925e332363f23135a0eff2b35; from e35f56bb03304abc92c928b641af41ca372966bb before e238ab12556b00f3b4d8b870b32ba1e4f4d4ebc2; from e35f56bb03304abc92c928b641af41ca372966bb before 73bf218de28d039126dc64281d2b47dd3c46a0a3; from e35f56bb03304abc92c928b641af41ca372966bb before cec9ead73ab154a7953f6ab8dd5127e0d6bbf95a; from e35f56bb03304abc92c928b641af41ca372966bb before 478e776101592eb63298714e96823ef78a3295ec; from e35f56bb03304abc92c928b641af41ca372966bb before a7a3cab4d33fd8a8aed864c447d0d7c99e85404e; from e35f56bb03304abc92c928b641af41ca372966bb before 0da63230d3ec1ec5fcc443a2314233e95bfece54; and 1 more ranges	CNA record
linux linux_kernel linux:linux_kernel	from 6.0 before 6.6.136; from 6.7 before 6.12.84; from 6.13 before 6.18.24; from 6.19 before 6.19.14; from 7.0 before 7.0.1	NVD

References

References

https://git.kernel.org/stable/c/305a0674bc552bfcc3231e23fb91cf4f62aec168
https://git.kernel.org/stable/c/b261027a1a235d8925e332363f23135a0eff2b35
https://git.kernel.org/stable/c/e238ab12556b00f3b4d8b870b32ba1e4f4d4ebc2	patch
https://git.kernel.org/stable/c/73bf218de28d039126dc64281d2b47dd3c46a0a3	patch
https://git.kernel.org/stable/c/cec9ead73ab154a7953f6ab8dd5127e0d6bbf95a	patch
https://git.kernel.org/stable/c/478e776101592eb63298714e96823ef78a3295ec	patch
https://git.kernel.org/stable/c/a7a3cab4d33fd8a8aed864c447d0d7c99e85404e	patch
https://git.kernel.org/stable/c/0da63230d3ec1ec5fcc443a2314233e95bfece54	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.