CVE-2026-43200 Details
Description
In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Fix swapped parameters in pci_{primary/secondary}_epc_epf_unlink() functions struct configfs_item_operations callbacks are defined like the following: int (*allow_link)(struct config_item *src, struct config_item *target); void (*drop_link)(struct config_item *src, struct config_item *target); While pci_primary_epc_epf_link() and pci_secondary_epc_epf_link() specify the parameters in the correct order, pci_primary_epc_epf_unlink() and pci_secondary_epc_epf_unlink() specify the parameters in the wrong order, leading to the below kernel crash when using the unlink command in configfs: Unable to handle kernel paging request at virtual address 0000000300000857 Mem abort info: ... pc : string+0x54/0x14c lr : vsnprintf+0x280/0x6e8 ... string+0x54/0x14c vsnprintf+0x280/0x6e8 vprintk_default+0x38/0x4c vprintk+0xc4/0xe0 pci_epf_unbind+0xdc/0x108 configfs_unlink+0xe0/0x208+0x44/0x74 vfs_unlink+0x120/0x29c __arm64_sys_unlinkat+0x3c/0x90 invoke_syscall+0x48/0x134 do_el0_svc+0x1c/0x30prop.0+0xd0/0xf0 [mani: cced stable, changed commit message as per https://lore.kernel.org/linux-pci/aV9joi3jF1R6ca02@ryzen]
A vulnerability exists in the Linux kernel's PCI endpoint management, specifically within the unlink functions for primary and secondary EPC-EPF associations. The issue arises from a parameter order mismatch in the unlink functions, which incorrectly specifies the source and target items. This flaw leads to a kernel crash when the unlink command is executed in configfs, as the system is unable to properly handle the misaligned data, causing a paging request error. The vulnerability affects the Linux kernel stable tree.
Users can apply the available patch in the Linux kernel stable tree to fix this vulnerability. Instructions for downloading the patched version can be found in the Linux kernel repository.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/142b1bba3299264b76ed8ef53cd93b2b2af65d6c | kernel.org | Patch |
| https://git.kernel.org/stable/c/1c96c1acef4b4a1108fc13f84a8ac0b0633bbb46 | kernel.org | Patch |
| https://git.kernel.org/stable/c/339191811e6fc4559c4008c5af7a91b05086d596 | kernel.org | Patch |
| https://git.kernel.org/stable/c/58686bf62cb38b92e4b28408162a5703775b4d12 | kernel.org | Patch |
| https://git.kernel.org/stable/c/733cbc3aa97e71cc70847e75c925b364cc9b04a6 | kernel.org | Patch |
| https://git.kernel.org/stable/c/8754dd7639ab0fd68c3ab9d91c7bdecc3e5740a8 | kernel.org | Patch |
| https://git.kernel.org/stable/c/aefc0e0bd20f54abe3b501b8798c0be656af272b | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 5.12, < 5.15.202 >= 5.16, < 6.1.165 >= 6.2, < 6.6.128 >= 6.7, < 6.12.75 >= 6.13, < 6.18.16 >= 6.19, < 6.19.6 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| May 11, 2026 | Initial Analysis | [email protected] |
| May 6, 2026 | New CVE Received | kernel.org |