01 Record

CVE-2026-31594

PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.12% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 2.0% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-06-17.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published: 2026-04-24 14:42Z6 MO AGO
Last updated: 2026-06-14 17:42Z4 MO AGO
Reserved: 2026-03-09
Assigning CNA: Linux
Record state: PUBLISHED
Severity: Not rated by the issuing CNA
CNA CVSS vector: Not published by the issuing CNA
Weaknesses: No CWE assigned
Data version: 5.2
Document digest: 7c212300c26d80509a5480e8468054593440e06176e9117a24d5ed512caac327

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxe2b6ef72b7aea9d7d480d2df499bcd1c93247abb to < 305a0674bc552bfcc3231e23fb91cf4f62aec168, e35f56bb03304abc92c928b641af41ca372966bb to < b261027a1a235d8925e332363f23135a0eff2b35, e35f56bb03304abc92c928b641af41ca372966bb to < e238ab12556b00f3b4d8b870b32ba1e4f4d4ebc2, e35f56bb03304abc92c928b641af41ca372966bb to < 73bf218de28d039126dc64281d2b47dd3c46a0a3, e35f56bb03304abc92c928b641af41ca372966bb to < cec9ead73ab154a7953f6ab8dd5127e0d6bbf95a, e35f56bb03304abc92c928b641af41ca372966bb to < 478e776101592eb63298714e96823ef78a3295ec, e35f56bb03304abc92c928b641af41ca372966bb to < a7a3cab4d33fd8a8aed864c447d0d7c99e85404e, e35f56bb03304abc92c928b641af41ca372966bb to < 0da63230d3ec1ec5fcc443a2314233e95bfece54, 5.15.153 to < 5.15.209, 6.0—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/305a0674bc552bfcc3231e23fb91cf4f62aec168
git.kernel.orghttps://git.kernel.org/stable/c/b261027a1a235d8925e332363f23135a0eff2b35
git.kernel.orghttps://git.kernel.org/stable/c/e238ab12556b00f3b4d8b870b32ba1e4f4d4ebc2
git.kernel.orghttps://git.kernel.org/stable/c/73bf218de28d039126dc64281d2b47dd3c46a0a3
git.kernel.orghttps://git.kernel.org/stable/c/cec9ead73ab154a7953f6ab8dd5127e0d6bbf95a
git.kernel.orghttps://git.kernel.org/stable/c/478e776101592eb63298714e96823ef78a3295ec
git.kernel.orghttps://git.kernel.org/stable/c/a7a3cab4d33fd8a8aed864c447d0d7c99e85404e
git.kernel.orghttps://git.kernel.org/stable/c/0da63230d3ec1ec5fcc443a2314233e95bfece54

07 Fixed in

Debian 12

linux
Fixed in 6.1.176-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.85-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.19.14-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.