CVE-2026-97946

CVE CVE-2026-97946EUVD EUVD-2026-86800Published 2026-09-25T10:22:56.000Z

What the advisory describes

In the Linux kernel, the following vulnerability has been resolved: x86/amd_node: Fix PCI device reference counting in amd_smn_init() The local "root" pointer is a temporary variable used during the device search. Therefore, refcount related to the search iterators should be cleaned up after the search is complete. Use the __free() cleanup macro to ensure the refcount is decremented when the temporary pointer goes out of scope. Additionally, increment the refcount when caching a root pointer. This ensures the in-use refcount is separate from the temporary search refcounting. Finally, drop the redundant "root = NULL" before the second search loop. The pci_get_class() iterator always decrements the refcount of its "from" argument, so the first loop can only fall through with "root" already NULL.

Source: EUVD (ENISA), in the words of the advisory.

Products the advisory names

These come from the advisory itself, not from any check we performed.

• Linux — Linux patch: 6.18.53; patch: 7.3-rc4; 6.18; 0a4b61d9c2e496b5f0a10e29e355a1465c8738bb <84e3a71d11d8593c127b468d75b2653af5074f81; patch: 0; c4ad899a33198ab6335732c769835d035e66894a; 6.17.8 <6.18; 0a4b61d9c2e496b5f0a10e29e355a1465c8738bb <aa2a4277ad42fd8f918c6dc652473946a253f7b0; 0a4b61d9c2e496b5f0a10e29e355a1465c8738bb <27600805e62f800bacf990354632eae4e487d34c; patch: 7.2.7

The versions shown are the advisory's own. Patchlage compares no version numbers and derives no judgement from them — which version is installed is something a person has to look up.

Carried in the product catalogue

An estate covering these products can be recorded in Patchlage. An advisory about them appears in the next morning's situation report.

• Linux — Linux

Patchlage reports hits and suspected hits. About everything else this system says nothing — neither this page nor the situation report ever claims that an estate is safe.