In the Linux kernel, the following vulnerability has been resolved:
PCI: pnv_php: Fix surprise plug detection and recovery
The existing PowerNV hotplug code did not handle surprise plug events correctly, leading to a complete failure of the hotplug system after device removal and a required reboot to detect new devices.
This comes down to two issues:
1) When a device is surprise removed, often the bridge upstream port will cause a PE freeze on the PHB. If this freeze is not cleared, the MSI interrupts from the bridge hotplug notification logic will not be received by the kernel, stalling all plug events on all slots associated with the PE.
2) When a device is removed from a slot, regardless of surprise or programmatic removal, the associated PHB/PE ls left frozen. If this freeze is not cleared via a fundamental reset, skiboot is unable to clear the freeze and cannot retrain / rescan the slot. This also requires a reboot to clear the freeze and redetect the device in the slot.
Issue the appropriate unfreeze and rescan commands on hotplug events, and don't oops on hotplug if pci_bus_to_OF_node() returns NULL.
[bhelgaas: tidy comments]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 8, 2025 | Sep 8, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Aug 22, 2025 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-debugUpgrade kernel-64kb-extraUpgrade kernel-syms-rtUpgrade kernel-azure-vdsoUpgrade dtb-sprdUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-defaultUpgrade dlm-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-debug-develUpgrade dtb-broadcomUpgrade cluster-md-kmp-defaultUpgrade dtb-hisiliconUpgrade dtb-socionextUpgrade kernel-obs-buildUpgrade kernel-default-manUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade dtb-renesasUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-source-rtUpgrade dtb-marvellUpgrade gfs2-kmp-defaultUpgrade dtb-apmUpgrade dlm-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-extraUpgrade dtb-amlogicUpgrade kernel-macrosUpgrade kernel-64kb-optionalUpgrade dtb-amdUpgrade dtb-armUpgrade kernel-obs-qaUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-rt-optionalUpgrade kernel-docsUpgrade dtb-appleUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade dtb-nvidiaUpgrade kernel-default-develUpgrade kernel-devel-azureUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmallUpgrade kernel-syms-azureUpgrade kernel-rt-develUpgrade kernel-default-base-rebuildUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-develUpgrade cluster-md-kmp-rtUpgrade dtb-qcomUpgrade kernel-source-azureUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-devel-rtUpgrade dtb-allwinnerUpgrade dlm-kmp-64kbUpgrade dtb-amazonUpgrade dtb-alteraUpgrade dtb-lgUpgrade kernel-develUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-azureUpgrade dtb-exynosUpgrade dtb-xilinxUpgrade kernel-rt-livepatchUpgrade kernel-azure-develUpgrade dtb-caviumUpgrade dtb-rockchipUpgrade kernel-kvmsmall-develUpgrade kernel-rtUpgrade kernel-64kbUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-azureUpgrade dtb-mediatekUpgrade ocfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-azureUpgrade kernel-default-livepatchUpgrade gfs2-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-azure-optionalUpgrade kernel-default-vdsoUpgrade kernel-sourceUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-azure | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-aws-64k-6.14Upgrade linux-image-gkeopUpgrade linux-image-aws-6.14Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-realtime-6.8.1Upgrade linux-image-5.15.0-1097-awsUpgrade linux-image-ibm-6.8Upgrade linux-image-oem-20.04bUpgrade linux-image-oracle-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-raspi-6.14Upgrade linux-image-xilinx-6.8Upgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-oem-20.04Upgrade linux-image-generic-6.14Upgrade linux-image-aws-lts-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-5.15.0-1101-azureUpgrade linux-image-raspi-6.8Upgrade linux-image-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-aws-5.15Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1102-azureUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-genericUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-xilinxUpgrade linux-image-6.14.0-36-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-kvm-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-oem-24.04Upgrade linux-image-virtualUpgrade linux-image-gkeUpgrade linux-image-virtual-6.14Upgrade linux-image-aws-lts-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-20.04dUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-gcp-6.14Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-aws-fips-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-realtime-5.15Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-aws-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-raspi-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-aws-6.8Upgrade linux-image-fips-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-generic-64kUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-5.15.0-163-fipsUpgrade linux-image-5.15.0-163-genericUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-intelUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-lowlatency-5.15Upgrade linux-image-fipsUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-virtual-6.8Upgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-realtime-6.14Upgrade linux-image-oracle-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-generic-64k-6.14Upgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-gcp-6.8Upgrade linux-image-awsUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-6.14Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-6.14.0-1016-oemUpgrade linux-image-oracleUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-virtual-5.15Upgrade linux-image-raspiUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-ibm-5.15Upgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-aws-fips-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-6.14.0-1017-azureUpgrade linux-image-gke-5.15Upgrade linux-image-6.14.0-1017-awsUpgrade linux-image-kvmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-fipsUpgrade linux-image-gcp-64kUpgrade linux-image-generic-5.15Upgrade linux-image-azure-6.14Upgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-azure-lts-24.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-realtimeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-5.15.0-1092-nvidia | Nov 25, 2025 | Nov 21, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 19, 2025 | Aug 22, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub