CVE-2026-46009

In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: pci-epf-ntb: Remove duplicate resource teardown epf_ntb_epc_destroy() duplicates the teardown that the caller is supposed to do later. This leads to an oops when .allow_link fails or when .drop_link is performed. Remove the helper. Also drop pci_epc_put(). EPC device refcounting is tied to configfs EPC group lifetime, and pci_epc_put() in the .drop_link path is sufficient.

Affected products

Linux Kernel, Ubuntu, Opensuse Tumbleweed

Linux Linux Kernel

< 5.15.209, 6.1.175, 6.6.140, 6.12.86, 6.18.27, 7.0.4

Fix

Available

CVSS 3.1

5.5 MEDIUM

EPSS

0.1% (2th percentile)

NVD status

Analyzed

Published

2026-05-27

No exploit for CVE-2026-46009 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.