{"id":"CVE-2026-90421","summary":"PCI: Fix UAF when probe runs concurrent to dyn ID removal","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: Fix UAF when probe runs concurrent to dyn ID removal\n\nDynamic IDs are only guaranteed to be valid when dynids.lock is held,\nas remove_id_store() can free the node. Thus, make a copy in\npci_match_device(). Also, clarify that the id parameter is only valid\nduring probe.","modified":"2026-09-18T03:48:38.551861948Z","published":"2026-09-17T16:09:45.185Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/90xxx/CVE-2026-90421.json","cna_assigner":"Linux"},"references":[{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"},{"type":"WEB","url":"https://git.kernel.org/stable/c/3ffc4c9690c33ee28cdb3d0182b12f9c623e3acc"},{"type":"WEB","url":"https://git.kernel.org/stable/c/42a5661ff7e4c7d3c5025d0f8e5079fb5479ea49"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/90xxx/CVE-2026-90421.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90421"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"0994375e9614f78657031e04e30019b9cdb62795"},{"fixed":"42a5661ff7e4c7d3c5025d0f8e5079fb5479ea49"},{"fixed":"3ffc4c9690c33ee28cdb3d0182b12f9c623e3acc"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90421.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.6.30"},{"fixed":"7.2.6"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90421.json"}}],"schema_version":"1.9.0"}