vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2023-54326

misc: pci_endpoint_test: Free IRQs before removing the device

HIGH
7.8
CVSS Score
Published: December 30, 2025 at 12:37 PM UTC
Updated: August 5, 2026 at 10:24 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH7.8
Exploit prediction
EPSS 0.1%

Description

In the Linux kernel, the following vulnerability has been resolved: misc: pci_endpoint_test: Free IRQs before removing the device In pci_endpoint_test_remove(), freeing the IRQs after removing the device creates a small race window for IRQs to be received with the test device memory already released, causing the IRQ handler to access invalid memory, resulting in an oops. Free the device IRQs before removing the device to avoid this issue.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
95%
4.19 ≤ v < 4.19.2914.19 ≤ v < 5.10.1884.19 ≤ v < 5.15.1214.19 ≤ v < 5.4.2514.19 ≤ v < 6.1.404.19 ≤ v < 6.4.54.19 ≤ v < 6.54.19e03327122e2c8e6ae4565ef5b3d3cbe4364546a1
Vendor states this is fixed in 14bdee38e96c7d37ca15e7bea50411eee25fe315 (fixed)
Vendor states this is fixed in 38d12bcf4e2ce3d285eb29644a79a54f42040fab (fixed)
Vendor states this is fixed in c2dba13bc0c62b79a3cbe4bfe5faa32231bf9b55 (fixed)
Vendor states this is fixed in cdf9a7e2cdc7a5464e3cc6d0b715ba2b1d215521 (fixed)
Vendor states this is fixed in dd2210379205fcd23a9d8869b0cef90e3770577c (fixed)
Vendor states this is fixed in f61b7634a3249d12b9daa36ffbdb9965b6f24c6c (fixed)
Vendor states this is fixed in fb7f8bdb886f2ebf35ee5edaf2bf5f02b063ddb7 (fixed)
Vendor states this is fixed in 4.19 (unaffected)
Vendor states this is fixed in 4.19.291 (unaffected)
Vendor states this is fixed in 5.10.188 (unaffected)
Vendor states this is fixed in 5.15.121 (unaffected)
Vendor states this is fixed in 5.4.251 (unaffected)
Vendor states this is fixed in 6.1.40 (unaffected)
Vendor states this is fixed in 6.4.5 (unaffected)
Vendor states this is fixed in 6.5 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (7)

Source: cverecord
https://git.kernel.org/stable/c/fb7f8bdb886f2ebf35ee5edaf2bf5f02b063ddb7
Source: cverecord
https://git.kernel.org/stable/c/dd2210379205fcd23a9d8869b0cef90e3770577c
Source: cverecord
https://git.kernel.org/stable/c/cdf9a7e2cdc7a5464e3cc6d0b715ba2b1d215521
Source: cverecord
https://git.kernel.org/stable/c/14bdee38e96c7d37ca15e7bea50411eee25fe315
Source: cverecord
https://git.kernel.org/stable/c/c2dba13bc0c62b79a3cbe4bfe5faa32231bf9b55
Source: cverecord
https://git.kernel.org/stable/c/38d12bcf4e2ce3d285eb29644a79a54f42040fab
Source: cverecord
https://git.kernel.org/stable/c/f61b7634a3249d12b9daa36ffbdb9965b6f24c6c

CVSS

7.8HIGHLinux
Vector?

Quick Info

StatusDEFERRED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card