Linux Kernel Vulnerability in Alpha's PCI Mapping Function

CVE-2026-80867

What is CVE-2026-80867?

In the Linux kernel's Alpha architecture, a significant vulnerability exists in the pci_mmap_resource() function. This issue arises because the function does not implement a security_locked_down() check before permitting userspace to mmap PCI Base Address Registers (BARs). This oversight leaves systems vulnerable to Direct Memory Access (DMA) attacks when the kernel is in a locked down state. To remediate this, a security check is now integrated to prevent unauthorized access, aligning Alpha's implementation with the established security protocols present in the generic version of the Linux kernel.

References