CVE Database›Document archive›CVE-2026-45904

CVE-2026-45904

kernel: powerpc/eeh: fix recursive pci_lock_rescan_remove locking in EEH event handling

Loading…

Severity

Low

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · May 27, 2026

Updated · October 30, 2026

Description

A flaw was found in the Linux kernel's PowerPC Enhanced Error Handling (EEH) driver. This issue involves a recursive locking mechanism where the system attempts to acquire a Peripheral Component Interconnect (PCI) bus lock multiple times. This can lead to a system deadlock, causing unresponsiveness and a Denial of Service (DoS) for affected systems.

Statement

This vulnerability is rated as having a Low impact because it strictly affects IBM Power (PowerPC) systems during runtime PCI error recovery scenarios. Triggering the deadlock requires an active Enhanced Error Handling (EEH) event, which is generated by underlying hardware faults or device hotplug operations rather than arbitrary unprivileged user actions. Non-Power architectures are completely unaffected, substantially restricting the blast radius in typical enterprise deployments.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-833 · Deadlock