CVE-2026-43211
kernel: PCI: Fix pci_slot_trylock() error handling
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · May 6, 2026
Updated · October 30, 2026
Description
A flaw was found in the Linux kernel. An error in the PCI (Peripheral Component Interconnect) subsystem's lock management, specifically within the pci_slot_trylock() function, can lead to system instability. This occurs when a lock is incorrectly released, potentially causing warnings or interfering with other processes. A local attacker could exploit this to cause a denial of service.
Statement
This flaw is rated as having a Low impact because triggering the lock imbalance requires specific concurrent PCI slot or bus management operations that are typically restricted to privileged local users or specific hardware management events. While an erroneous unlock could release another thread's lock and lead to kernel warnings or denial of service, it cannot be leveraged to compromise confidentiality or integrity. Furthermore, typical workloads without active PCI slot manipulation or hotplug operations will rarely traverse this specific failure code path.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-832 · Unlock of a Resource that is not Locked