Not yet scoredPublished Sep 17, 2026

CVE-2026-90421PCI: Fix UAF when probe runs concurrent to dyn ID removal

Updated under an hour ago (Oct 28, 2026, 8:50 AM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: PCI: Fix UAF when probe runs concurrent to dyn ID removal Dynamic IDs are only guaranteed to be valid when dynids.lock is held, as remove_id_store() can free the node. Thus, make a copy in pci_match_device(). Also, clarify that the id parameter is only valid during probe.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Oct 21, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 0994375e9614f78657031e04e30019b9cdb62795 before d867db0a2602919510f346bc555f7b3093f6b6cc; 0994375e9614f78657031e04e30019b9cdb62795 builds before 2cbcb0819c6367e1d5b0792a960594cc19576e23; from 0994375e9614f78657031e04e30019b9cdb62795 before c36816feff47f676dcc51919777d483f4146c1ee; 0994375e9614f78657031e04e30019b9cdb62795 builds before 42a5661ff7e4c7d3c5025d0f8e5079fb5479ea49; 0994375e9614f78657031e04e30019b9cdb62795 builds before 3ffc4c9690c33ee28cdb3d0182b12f9c623e3acc	CNA record

References

References

https://git.kernel.org/stable/c/d867db0a2602919510f346bc555f7b3093f6b6cc
https://git.kernel.org/stable/c/2cbcb0819c6367e1d5b0792a960594cc19576e23
https://git.kernel.org/stable/c/c36816feff47f676dcc51919777d483f4146c1ee
https://git.kernel.org/stable/c/42a5661ff7e4c7d3c5025d0f8e5079fb5479ea49
https://git.kernel.org/stable/c/3ffc4c9690c33ee28cdb3d0182b12f9c623e3acc

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.