CVE-2026-31594
PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown
Reported by linux · Published April 24, 2026
In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown epf_ntb_epc_destroy() duplicates the teardown that the caller is supposed to perform later. This leads to an oops when .allow_link fails or when .drop_link is performed. The following is an example oops of the former case: Unable to handle kernel paging request at virtual address dead000000000108 [...] [dead000000000108] address between user and kernel address ranges Internal error: Oops: 0000000096000044 [#1] SMP [...] Call trace: pci_epc_remove_epf+0x78/0xe0 (P) pci_primary_epc_epf_link+0x88/0xa8 configfs_symlink+0x1f4/0x5a0 vfs_symlink+0x134/0x1d8 do_symlinkat+0x88/0x138 __arm64_sys_symlinkat+0x74/0xe0 [...] Remove the helper, and drop pci_epc_put(). EPC device refcounting is tied to the configfs EPC group lifetime, and pci_epc_put() in the .drop_link path is sufficient.
EPSS 0.12% · 2.0th percentile
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| linux_kernel | linux | 7.0.1, 6.19.14, 6.18.24, 6.12.84, 6.6.136 |
Risk scores
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | e2b6ef72b7aea9d7d480d2df499bcd1c93247abb, e35f56bb03304abc92c928b641af41ca372966bb, e35f56bb03304abc92c928b641af41ca372966bb |
| Linux | Linux | 6.0, 0, 5.15.209 |
| chainguard | linux-vmware-6.12 | 0 |
| linux | linux_kernel | 6.0, 6.0, 6.0 |
| chainguard | linux-gcp-6.18 | 0 |
| chainguard | linux-qemu-6.18 | 0 |
| chainguard | linux-azure-6.18 | 0 |
| Linux | Linux | 7.1, *, 5.15.153 |
| chainguard | linux-aws-6.12 | 0 |
| chainguard | linux-aws-6.18 | 0 |
| chainguard | linux-vmware-6.18 | 0 |
| chainguard | linux-qemu-6.12 | 0 |
Timeline
- Apr 24, 2026 CVE Published
- Apr 24, 2026 Security Advisory (103 in total, the first dated here)
- May 18, 2026 EPSS Score (24 in total, the first dated here)
- Jun 14, 2026 CVE Updated
- Jul 18, 2026 Coalition ESS Score
- Aug 11, 2026 Distribution Patch (97 in total, the first dated here)
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2026-31594
vulnetix vdb fixes CVE-2026-31594Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2026-31594/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart