01 Record

CVE-2026-43211

PCI: Fix pci_slot_trylock() error handling

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

PCI: Fix pci_slot_trylock() error handling

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpacttotalSuccessful exploitation gives total control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.10% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 1.1% of scored records. A rank, not a probability.

NVD base score

7.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-10-19.

Red Hat severity

Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-05-06 11:28Z5 MO AGO

Last updated

2026-10-19 19:16Z10 DAYS AGO

Reserved

2026-05-01

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-667Improper LockingClass

Data version

5.2

Document digest

60e4cd2212d60ca8e8695580fac6f356a093215f46499b1a0b365e8491a58142

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxe2355d513b89a2cb511b4ded0deb426cdb01acd0 to < ebb27b7399ab8b9eb1f792b329aa5f6250c590d4, 04e85a3285b0e5c5af6fd2c0fd6e95ffecc01945 to < fbe06a3058114bf95a17a4941b205f4b321c6f0a, 7253b4fed46471cc247c6cacefac890a8472c083 to < 943ed56606a7ab2fe5a99cad572dd17d484310c7, 78c6e39fef5c428960aff742149bba302dd46f5a to < a19b61fdb958ffadbba85b43c991eb9fc70c1c1c, a4e772898f8bf2e7e1cf661a12c60a5612c4afab to < 0425aaf20b407d2f2cf3bf469808e4a35f9abb8b, a4e772898f8bf2e7e1cf661a12c60a5612c4afab to < bd435f4b738130d732ef64e0e57e45185f77165d, a4e772898f8bf2e7e1cf661a12c60a5612c4afab to < 8b08ea9690b212b7bf7f12414039259cf34b1aa0, a4e772898f8bf2e7e1cf661a12c60a5612c4afab to < 9368d1ee62829b08aa31836b3ca003803caf0b72, 0790b89c7e911003b8c50ae50e3ac7645de1fae9, df77a678c33871a6e4ac5b54a71662f1d702335b, 81c68e218ab883dfa368460a59b674084c0240da, 5.10.226 to < 5.10.252, 5.15.167 to < 5.15.202, 6.1.110 to < 6.1.165, 6.6.51 to < 6.6.128, 4.19.322 to < 4.20, 5.4.284 to < 5.5, 6.10.10 to < 6.11, 6.11—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/ebb27b7399ab8b9eb1f792b329aa5f6250c590d4
git.kernel.orghttps://git.kernel.org/stable/c/fbe06a3058114bf95a17a4941b205f4b321c6f0a
git.kernel.orghttps://git.kernel.org/stable/c/943ed56606a7ab2fe5a99cad572dd17d484310c7
git.kernel.orghttps://git.kernel.org/stable/c/a19b61fdb958ffadbba85b43c991eb9fc70c1c1c
git.kernel.orghttps://git.kernel.org/stable/c/0425aaf20b407d2f2cf3bf469808e4a35f9abb8b
git.kernel.orghttps://git.kernel.org/stable/c/bd435f4b738130d732ef64e0e57e45185f77165d
git.kernel.orghttps://git.kernel.org/stable/c/8b08ea9690b212b7bf7f12414039259cf34b1aa0
git.kernel.orghttps://git.kernel.org/stable/c/9368d1ee62829b08aa31836b3ca003803caf0b72

07 Fixed in

Debian 12

linux
Fixed in 6.1.170-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.85-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.19.6-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.