CVE-2026-72329

CVE-2026-72329

Critical · published August 15, 2026

CVSS v3.1
9.3
EPSS
0%
Percentile
8.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net/liquidio: drop cached VF pci_dev LUT

The PF SR-IOV enable path caches VF pci_dev pointers in

dpiring_to_vfpcidev_lut[] by iterating with pci_get_device(). Those

entries do not own a reference, because the iterator drops the previous

device reference on each step. The cached pointer is then dereferenced

later when handling OCTEON_VF_FLR_REQUEST.

Replace the cached VF mapping with runtime lookup on the mailbox DPI

ring: derive the VF index from q_no, resolve the VF via exported PCI

IOV helpers, validate it with the PF pointer and VF ID, then issue

pcie_flr() and drop the reference with pci_dev_put(). Remove the

unused VF lookup table initialization and cleanup.

The record
Technical detail
CVSS v3.1
9.3 · CRITICAL
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00193 · 8.5th percentile
Published
2026-08-15T10:22Z
References (5)
EPSS history
Timeline
  • 15 AUG 05:55Z
    net/liquidio: drop cached VF pci_dev LUT
    cvelistv5