CVE-2026-97505

CVE-2026-97505

published September 24, 2026

CVSS
—
EPSS
0%
Percentile
4.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store()

Currently, the __resource_resize_store() allows writing to the

resourceN_resize sysfs attribute to change a BAR's size without checking

for capabilities, currently relying only on the file access check.

Resizing a BAR modifies PCI device configuration and can disrupt active

drivers. After the upcoming conversion to static attributes, it will also

trigger resource file updates via sysfs_update_groups().

Add a CAP_SYS_ADMIN check to prevent unprivileged users from performing BAR

resize operations.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00156 · 4.4th percentile
Published
2026-09-24T21:17Z
References (4)
EPSS history
Timeline
  • 26 SEP 03:27Z
    EPSS moved — → 0%
    epss
  • 24 SEP 16:04Z
    PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store()
    cvelistv5