CVE-2026-98504
Description
In the Linux kernel, the following vulnerability has been resolved: PCI: of_property: Omit bus properties without a subordinate bus A bridge (a device with a Type 1 header) may not have a secondary bus allocated (pdev->subordinate), e.g., if there are no available bus numbers or the bridge secondary/subordinate bus numbers are not writable. The dynamic OF helpers of_pci_prop_bus_range() and of_pci_prop_intr_map() dereference pdev->subordinate without checking it. When CONFIG_PCI_DYNAMIC_OF_NODES is enabled, this can cause a NULL pointer dereference and early boot hang. Generate 'bus-range' and 'interrupt-map' properties only when a subordinate bus exists. Keep the node and its remaining properties for bridges without one. The problem was latent since 407d1a51921e ("PCI: Create device tree node for bridge"), but wasn't reachable until 1f340724419e ("PCI: of: Create device tree PCI host bridge node"), which appeared in v6.15. Before 1f340724419e, of_pci_make_dev_node() returned early because the parent OF node was missing. [bhelgaas: move pdev->subordinate test to callees, commit log]
How to fix
- Linux Linuxccd32fa3489cbe86a0b281da4447b4c7eadb3518, a6d97d10e49ae49026ae13af6c41634fce470a37, 879c911f77b8a7862aa16079b04efc3fdc5d32ec, aee774588abd78f75952fd34c3fa461bc46b62c2, 8805840aad73df7146778be243a196d48b4f6430 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 407d1a51921e9f28c1bcec647c2205925bd1fdab ≤ v < ccd32fa3489cbe86a0b281da4447b4c7eadb3518, 407d1a51921e9f28c1bcec647c2205925bd1fdab ≤ v < a6d97d10e49ae49026ae13af6c41634fce470a37, 407d1a51921e9f28c1bcec647c2205925bd1fdab ≤ v < 879c911f77b8a7862aa16079b04efc3fdc5d32ec, 407d1a51921e9f28c1bcec647c2205925bd1fdab ≤ v < aee774588abd78f75952fd34c3fa461bc46b62c2, 407d1a51921e9f28c1bcec647c2205925bd1fdab ≤ v < 8805840aad73df7146778be243a196d48b4f6430, 6.6 | ccd32fa3489cbe86a0b281da4447b4c7eadb3518, a6d97d10e49ae49026ae13af6c41634fce470a37, 879c911f77b8a7862aa16079b04efc3fdc5d32ec, aee774588abd78f75952fd34c3fa461bc46b62c2, 8805840aad73df7146778be243a196d48b4f6430 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.