Skip to content
Heist/ feed
High

PCI: Allow per function PCI slots to fix slot reset on s390

Type: advisorySource: Official CVE List1 source record

In the Linux kernel, the following vulnerability has been resolved: PCI: Allow per function PCI slots to fix slot reset on s390 On s390 systems, which use a machine level hypervisor, PCI devices are always accessed through a form of PCI pass-through which fundamentally operates on a per PCI function granularity. This is also reflected in the s390 PCI hotplug driver which creates hotplug slots for individual PCI functions. Its reset_slot() function, which is a wrapper for zpci_hot_reset_device(), thus also resets individual functions. Currently, the pci_create_slot() assigns the same pci_slot object to multifunction devices. This approach worked fine on s390 systems that only exposed virtual functions as individual PCI domains to the operating system. Since commit 44510d6fa0c0 ("s390/pci: Handling multifunctions") s390 supports exposing the topology of multifunction PCI devices by grouping them in a shared PCI domain. This creates a problem when resetting a function through the hotplug driver's slot_reset() interface. When attempting to reset a function through the hotplug driver, the shared slot assignment causes the wrong function to be reset instead of the intended one. It also leaks memory as we do create a pci_slot object for the function, but don't correctly free it in pci_slot_release(). Add a flag for struct pci_slot to allow per function PCI slots for functions managed through a hypervisor, which exposes individual PCI functions while retaining the topology. Since we

Announced Source revision 1
Original source ↗

CVE-2026-89795

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-89795

Linux

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Linux

Source reference: /containers/cna/affected/1/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "44510d6fa0c00aa90b80075caa6b313b25927475",
        "lessThan": "b4a80e9e639cf09ef5c66b7f262c9cb5ab37bdde",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "44510d6fa0c00aa90b80075caa6b313b25927475",
        "lessThan": "0d1a7d67f45645106578d65181e4e492dd20ed79",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "44510d6fa0c00aa90b80075caa6b313b25927475",
        "lessThan": "2050d900f9adbd6d6f38d30e182bcd9ad3108467",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "44510d6fa0c00aa90b80075caa6b313b25927475",
        "lessThan": "ecdcceed4d377b02d4ea036b65f83f962c38ede7",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "44510d6fa0c00aa90b80075caa6b313b25927475",
        "lessThan": "dcc5bec09e23bbc4f9de055a11fce9937244f2c8",
        "versionType": "git"
      }
    ],
    "programFiles": [
      "drivers/pci/pci.c",
      "drivers/pci/slot.c",
      "include/linux/pci.h"
    ],
    "defaultStatus": "unaffected"
  },
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "5.8"
      },
      {
        "status": "unaffected",
        "version": "0",
        "lessThan": "5.8",
        "versionType": "semver"
      },
      {
        "status": "unaffected",
        "version": "6.6.160",
        "versionType": "semver",
        "lessThanOrEqual": "6.6.*"
      },
      {
        "status": "unaffected",
        "version": "6.12.112",
        "versionType": "semver",
        "lessThanOrEqual": "6.12.*"
      },
      {
        "status": "unaffected",
        "version": "6.18.52",
        "versionType": "semver",
        "lessThanOrEqual": "6.18.*"
      },
      {
        "status": "unaffected",
        "version": "7.2.5",
        "versionType": "semver",
        "lessThanOrEqual": "7.2.*"
      },
      {
        "status": "unaffected",
        "version": "7.3",
        "versionType": "original_commit_for_fix",
        "lessThanOrEqual": "*"
      }
    ],
    "programFiles": [
      "drivers/pci/pci.c",
      "drivers/pci/slot.c",
      "include/linux/pci.h"
    ],
    "defaultStatus": "affected"
  }
]
Related CVEs
CVE-2026-89795

Source reference: /cveMetadata/cveId

Publisher severity

high

Source reference: /containers/cna/metrics

Event
#46727 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement