CVE-2026-72329
Received Received - Intake

Linux Kernel PCI SR-IOV VF Reference Handling Flaw

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: net/liquidio: drop cached VF pci_dev LUT The PF SR-IOV enable path caches VF pci_dev pointers in dpiring_to_vfpcidev_lut[] by iterating with pci_get_device(). Those entries do not own a reference, because the iterator drops the previous device reference on each step. The cached pointer is then dereferenced later when handling OCTEON_VF_FLR_REQUEST. Replace the cached VF mapping with runtime lookup on the mailbox DPI ring: derive the VF index from q_no, resolve the VF via exported PCI IOV helpers, validate it with the PF pointer and VF ID, then issue pcie_flr() and drop the reference with pci_dev_put(). Remove the unused VF lookup table initialization and cleanup.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-72329
EUVD
EUVD-2026-59228

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves unsafe caching of VF pci_dev pointers in the PF SR-IOV enable path. The cached entries do not hold proper device references, leading to potential use-after-free issues when the cached pointer is later dereferenced during OCTEON_VF_FLR_REQUEST handling.

Detection Guidance

This vulnerability involves a cached VF pci_dev pointer in the Linux kernel's net/liquidio driver. Detection requires checking for kernel logs or crashes related to SR-IOV VF handling, particularly during OCTEON_VF_FLR_REQUEST events. Monitor dmesg or system logs for errors involving pci_get_device or pcie_flr. No specific commands are provided in the context.

Impact Analysis

This vulnerability could allow an attacker to cause a denial of service or potentially execute arbitrary code in the kernel by exploiting the unsafe cached pointer dereference during VF FLR requests.

Mitigation Strategies

Apply the Linux kernel patch that resolves this issue. Update to a kernel version containing the fix for net/liquidio driver changes. Disable SR-IOV VF functionality if not required. Monitor vendor advisories for updates.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-72329. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart