CVE-2026-45904
kernel: powerpc/eeh: fix recursive pci_lock_rescan_remove locking in EEH event handling
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · May 27, 2026
Updated · October 30, 2026
Description
A flaw was found in the Linux kernel's PowerPC Enhanced Error Handling (EEH) driver. This issue involves a recursive locking mechanism where the system attempts to acquire a Peripheral Component Interconnect (PCI) bus lock multiple times. This can lead to a system deadlock, causing unresponsiveness and a Denial of Service (DoS) for affected systems.
Statement
This vulnerability is rated as having a Low impact because it strictly affects IBM Power (PowerPC) systems during runtime PCI error recovery scenarios. Triggering the deadlock requires an active Enhanced Error Handling (EEH) event, which is generated by underlying hardware faults or device hotplug operations rather than arbitrary unprivileged user actions. Non-Power architectures are completely unaffected, substantially restricting the blast radius in typical enterprise deployments.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-833 · Deadlock