Kernel Vulnerability in Linux Affecting PCI Resource Management

CVE-2026-97505

What is CVE-2026-97505?

A vulnerability in the Linux kernel allows unauthorized users to resize PCI device BARs through the sysfs interface. The __resource_resize_store() function failed to enforce adequate capability checks, permitting unprivileged operations that can compromise system stability. This oversight may lead to alterations in PCI device configurations, potentially disrupting ongoing driver activities. The patch introduces a CAP_SYS_ADMIN check, ensuring that only users with administrative privileges can perform such critical changes to device resources.

References