CVE-2026-45880

A flaw was found in the Linux kernel's PCI/P2PDMA subsystem. When the vm_insert_page() function fails during memory allocation, the system does not properly release a per-CPU reference for the page map. This oversight can lead to a resource leak, causing the memunmap_pages() function to hang indefinitely when attempting to remove a PCI device. Consequently, a local attacker could potentially trigger a Denial of Service (DoS) condition, making the system unresponsive.

This vulnerability is rated as having a Low severity because it requires local access on systems equipped with specialized PCI Peer-to-Peer DMA (P2PDMA) hardware and only manifests when an internal memory mapping error occurs followed by a PCI device removal. Under standard enterprise server configurations, peer-to-peer DMA between PCI devices is rarely utilized, and triggering the leak requires an uncommon allocation failure. In the event the flaw is encountered, the impact is confined to a hung task during device detachment or driver unbinding, without threatening data confidentiality or system integrity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.