CVE-2026-80917

A flaw was found in the Linux kernel's PCI host-generic component. On 32-bit systems utilizing the "pci-host-cam-generic" driver, a missing bus mapping setup during Peripheral Component Interconnect (PCI) configuration can lead to a NULL pointer dereference. This vulnerability can be triggered during bus enumeration, causing the system to crash and resulting in a Denial of Service (DoS).

Red Hat Product Security has rated this vulnerability as having a Low security impact because it is restricted to 32-bit systems utilizing legacy CAM generic PCI host controllers during hardware initialization. Supported Red Hat Enterprise Linux environments operate on 64-bit architectures, rendering standard enterprise deployments unaffected by this condition. Furthermore, the failure only occurs during boot-time bus enumeration on specialized embedded hardware platforms rather than through unprivileged runtime interaction.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.