In the Linux kernel, the following vulnerability has been resolved:
s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs
With commit bcb5d6c76903 ("s390/pci: introduce lock to synchronize state of zpci_dev's") the code to ignore power off of a PF that has child VFs was changed from a direct return to a goto to the unlock and pci_dev_put() section. The change however left the existing pci_dev_put() untouched resulting in a doubple put. This can subsequently cause a use after free if the struct pci_dev is released in an unexpected state. Fix this by removing the extra pci_dev_put().
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 20, 2025 |
| Suse | — | Upgrade kernel-macrosUpgrade kernel-rtUpgrade dtb-amlogicUpgrade kernel-rt-extraUpgrade kernel-default-extraUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-defaultUpgrade dtb-rockchipUpgrade dtb-sprdUpgrade ocfs2-kmp-azureUpgrade kernel-devel-rtUpgrade dlm-kmp-rtUpgrade dtb-apmUpgrade kernel-symsUpgrade cluster-md-kmp-defaultUpgrade kernel-develUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade dtb-armUpgrade kernel-syms-rtUpgrade kernel-default-optionalUpgrade dtb-nvidiaUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-default-baseUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade dtb-mediatekUpgrade dtb-qcomUpgrade kernel-azure-develUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-develUpgrade kernel-rt-develUpgrade dlm-kmp-azureUpgrade kernel-obs-qaUpgrade reiserfs-kmp-rtUpgrade dtb-xilinxUpgrade kernel-debug-vdsoUpgrade dlm-kmp-64kbUpgrade kernel-azure-optionalUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-azureUpgrade dtb-hisiliconUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-debugUpgrade cluster-md-kmp-azureUpgrade dtb-broadcomUpgrade dtb-alteraUpgrade dtb-freescaleUpgrade kernel-kvmsmall-develUpgrade kernel-azure-extraUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-default-livepatchUpgrade dtb-amdUpgrade dtb-lgUpgrade dtb-appleUpgrade kernel-source-azureUpgrade dtb-socionextUpgrade kernel-default-vdsoUpgrade kernel-docs-htmlUpgrade dtb-renesasUpgrade ocfs2-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-devel-azureUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-rtUpgrade kernel-64kb-optionalUpgrade dtb-marvellUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-64kbUpgrade kernel-sourceUpgrade kernel-default-develUpgrade dtb-exynosUpgrade dtb-amazonUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-vdsoUpgrade dtb-allwinnerUpgrade kernel-syms-azureUpgrade dtb-caviumUpgrade kernel-rt_debug-develUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade kernel-debug-develUpgrade kernel-azure-vdso | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-oem-24.04cUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-raspi-6.14Upgrade linux-image-gcp-64kUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-realtime-6.14Upgrade linux-image-gcp-6.14Upgrade linux-image-virtual-6.14Upgrade linux-image-generic-64kUpgrade linux-image-generic-6.14Upgrade linux-image-aws-6.14Upgrade linux-image-6.14.0-1009-oracle-64kUpgrade linux-image-6.14.0-1009-aws-64kUpgrade linux-image-raspiUpgrade linux-image-6.14.0-1009-awsUpgrade linux-image-realtimeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-6.14.0-24-genericUpgrade linux-image-oem-24.04aUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-oracle-64kUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.14.0-24-generic-64kUpgrade linux-image-genericUpgrade linux-image-azure-6.14Upgrade linux-image-oracle-6.14Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-oracleUpgrade linux-image-oem-24.04Upgrade linux-image-awsUpgrade linux-image-aws-64kUpgrade linux-image-6.14.0-1007-oemUpgrade linux-image-oem-6.14Upgrade linux-image-6.14.0-1011-gcpUpgrade linux-image-6.14.0-1009-raspiUpgrade linux-image-generic-64k-6.14Upgrade linux-image-6.14.0-1011-gcp-64kUpgrade linux-image-gcpUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.14.0-1010-azureUpgrade linux-image-6.14.0-1006-realtimeUpgrade linux-image-6.14.0-1009-oracle | Jun 26, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub