CVE-2026-68319
CVE CVE-2026-68319EUVD EUVD-2026-55420Published 2026-08-10T12:02:54.000Z
What the advisory describes
In the Linux kernel, the following vulnerability has been resolved: pds_core: fix deadlock between reset thread and remove pci_reset_function() acquires device_lock before performing the reset. pdsc_remove() is called by the PCI core with device_lock already held. If pdsc_pci_reset_thread() is running when pdsc_remove() is called, destroy_workqueue() will block waiting for the work to complete, while the work is blocked waiting for device_lock - deadlock. Use pci_try_reset_function() which uses pci_dev_trylock() internally. This acquires both the device lock and the PCI config access lock without blocking - if either lock is contended, it returns -EAGAIN immediately. This avoids the deadlock while also ensuring proper config space access serialization during the reset. The pci_dev_get/put calls are also removed as they were unnecessary - the driver-owned workqueue is destroyed in pdsc_remove(), guaranteeing the work completes before remove returns. The PCI core holds its reference to pci_dev throughout the entire unbind sequence.
Source: EUVD (ENISA), in the words of the advisory.
Products the advisory names
These come from the advisory itself, not from any check we performed.
- Linux — Linux 81665adf25d28a00a986533f1d3a5df76b79cad9 <54f905821f26d385fba407a920b51f0a752c76dc; 81665adf25d28a00a986533f1d3a5df76b79cad9 <90d9f3ef28843e6c35149324b8eefb427a7435c2; patch: 6.12.101; patch: 7.2-rc5; patch: 6.18.42; 38407914d48273d7f8ab765b9243658afe1c3ab6; 81665adf25d28a00a986533f1d3a5df76b79cad9 <19ef775c91c6bf4bd2b60f6616f4e28b621cdd6a; patch: 7.1.6; 6.8.7 <6.9; 81665adf25d28a00a986533f1d3a5df76b79cad9 <ab0eec0ff0a421737a37f510ceab5c6ea59cd05a; patch: 0; 6.9
The versions shown are the advisory's own. Patchlage compares no version numbers and derives no judgement from them — which version is installed is something a person has to look up.
Carried in the product catalogue
An estate covering these products can be recorded in Patchlage. An advisory about them appears in the next morning's situation report.
- Linux — Linux
Does this concern one of your customers?
This page cannot answer that — it does not know your estate. Whoever has recorded their environments gets the answer the morning after publication, together with a paragraph they can forward to the customer unedited.
Try it for 28 daysPatchlage reports hits and suspected hits. About everything else this system says nothing — neither this page nor the situation report ever claims that an estate is safe.