CVE-2026-68317

A flaw was found in the Linux kernel's pds_core component. A race condition exists during the addition and deletion of auxiliary devices, where concurrent operations can lead to a resource leak or a null pointer dereference. This vulnerability could allow a local attacker to cause a system crash, resulting in a Denial of Service (DoS).

This issue affects AMD Pensando (pds_core). VF reset and PF devlink race on auxiliary device add/delete. Systems without pds_core are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the pds_core module from loading. See https://access.redhat.com/solutions/41278 for instructions.