CVE-2026-80621

A flaw was found in the Linux kernel's PCI DesignWare Cores (DWC) driver. When the controller lacks RAS DES capability, the dwc_pcie_rasdes_debugfs_init() function can incorrectly report success, leaving a pointer uninitialized. During debugfs teardown, the dwc_pcie_rasdes_debugfs_deinit() function then attempts to use this uninitialized pointer, leading to a NULL pointer dereference. This can allow a local attacker to cause a system crash, resulting in a Denial of Service (DoS).

This flaw is rated as Moderate severity because exploitation is restricted to local attackers with access to driver debug interfaces and results strictly in a denial of service through a kernel panic, without compromising system confidentiality or integrity. Triggering this condition requires systems running on specific PCI DesignWare hardware controllers lacking RAS DES capability during debugfs teardown. Supported versions of Red Hat Enterprise Linux do not include the vulnerable upstream driver changes, leaving standard enterprise deployments unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.