All vulnerabilities
CVE-2026-97946

Linux: x86/amd_node: Fix PCI device reference counting in amd_smn_init()

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.20%Chance of exploitation activity in the next 30 days, higher than 9% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in84e3a71d11d8593c127b468d75b2653af5074f81Also 27600805e62f800bacf990354632eae4e487d34c, 6.18CVE List
Published25 Sep 2026Updated 19 Oct 2026CVE List

What fixes it

  • 84e3a71d11d8593c127b468d75b2653af5074f81LinuxCVE List
  • 27600805e62f800bacf990354632eae4e487d34cLinuxCVE List
  • 6.18LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

x86/amd_node: Fix PCI device reference counting in amd_smn_init()

The local "root" pointer is a temporary variable used during the device search. Therefore, refcount related to the search iterators should be cleaned up after the search is complete.

Use the __free() cleanup macro to ensure the refcount is decremented when the temporary pointer goes out of scope.

Additionally, increment the refcount when caching a root pointer. This ensures the in-use refcount is separate from the temporary search refcounting.

Finally, drop the redundant "root = NULL" before the second search loop. The pci_get_class() iterator always decrements the refcount of its "from" argument, so the first loop can only fall through with "root" already NULL.

Text from CVE List

Affected versions 10

  • Linuxaffected: 0a4b61d9c2e496b5f0a10e29e355a1465c8738bb before 84e3a71d11d8593c127b468d75b2653af5074f81CVE List
  • Linuxaffected: 0a4b61d9c2e496b5f0a10e29e355a1465c8738bb before aa2a4277ad42fd8f918c6dc652473946a253f7b0CVE List
  • Linuxaffected: 0a4b61d9c2e496b5f0a10e29e355a1465c8738bb before 27600805e62f800bacf990354632eae4e487d34cCVE List
  • Linuxaffected: c4ad899a33198ab6335732c769835d035e66894aCVE List
  • Linuxaffected: 6.17.8 before 6.18CVE List
  • Linuxaffected: 6.18CVE List
  • Linuxunaffected: all versions before 6.18CVE List
  • Linuxunaffected: 6.18.53 through 6.18.*CVE List
  • Linuxunaffected: 7.2.7 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 3