CVE-2026-93206

A flaw was found in the Linux kernel. This vulnerability allows an unprivileged local attacker to bypass security restrictions. By obtaining a file descriptor from a privileged process, the attacker can read the entire Peripheral Component Interconnect (PCI) configuration space, which could lead to the disclosure of sensitive system information.

This vulnerability is rated with a Low severity impact because exploitation requires local access and relies on unusual inter-process file descriptor passing between contexts with differing privileges. Under default configurations, standard user environments do not expose sensitive device registers via legacy procfs interfaces without administrative authorization. Furthermore, the exposure is confined to reading device configuration space, limiting the blast radius strictly to hardware metadata rather than code execution or privilege escalation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.