What’s Vulnerable › Vulnerabilities

CVE-2023-54326: misc: pci_endpoint_test: Free IRQs before removing the device

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-30 · updated 2026-08-04

Description

In the Linux kernel, the following vulnerability has been resolved: misc: pci_endpoint_test: Free IRQs before removing the device In pci_endpoint_test_remove(), freeing the IRQs after removing the device creates a small race window for IRQs to be received with the test device memory already released, causing the IRQ handler to access invalid memory, resulting in an oops. Free the device IRQs before removing the device to avoid this issue.

Affected products

• Linux kernel: 4.19 — fixed in 6.5

How to fix

Upgrade to a fixed version: Linux kernel 6.5. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/14bdee38e96c7d37ca15e7bea50411eee25fe315
• https://git.kernel.org/stable/c/38d12bcf4e2ce3d285eb29644a79a54f42040fab
• https://git.kernel.org/stable/c/c2dba13bc0c62b79a3cbe4bfe5faa32231bf9b55
• https://git.kernel.org/stable/c/cdf9a7e2cdc7a5464e3cc6d0b715ba2b1d215521
• https://git.kernel.org/stable/c/dd2210379205fcd23a9d8869b0cef90e3770577c
• https://git.kernel.org/stable/c/f61b7634a3249d12b9daa36ffbdb9965b6f24c6c
• https://git.kernel.org/stable/c/fb7f8bdb886f2ebf35ee5edaf2bf5f02b063ddb7

Get alerted when CVE-2023-54326 or the next vulnerability affects your stack