In the Linux kernel, the following vulnerability has been resolved:
PCI: pnv_php: Fix surprise plug detection and recovery
The existing PowerNV hotplug code did not handle surprise plug events correctly, leading to a complete failure of the hotplug system after device removal and a required reboot to detect new devices.
This comes down to two issues:
1) When a device is surprise removed, often the bridge upstream port will cause a PE freeze on the PHB. If this freeze is not cleared, the MSI interrupts from the bridge hotplug notification logic will not be received by the kernel, stalling all plug events on all slots associated with the PE.
2) When a device is removed from a slot, regardless of surprise or programmatic removal, the associated PHB/PE ls left frozen. If this freeze is not cleared via a fundamental reset, skiboot is unable to clear the freeze and cannot retrain / rescan the slot. This also requires a reboot to clear the freeze and redetect the device in the slot.
Issue the appropriate unfreeze and rescan commands on hotplug events, and don't oops on hotplug if pci_bus_to_OF_node() returns NULL.
[bhelgaas: tidy comments]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 8, 2025 | Sep 8, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Aug 22, 2025 |
| Suse | — | Upgrade gfs2-kmp-azureUpgrade kernel-64kbUpgrade kernel-azure-develUpgrade kernel-develUpgrade kernel-rt_debug-develUpgrade dtb-mediatekUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-default-livepatchUpgrade dtb-rockchipUpgrade kernel-64kb-develUpgrade kernel-default-develUpgrade ocfs2-kmp-rtUpgrade kernel-devel-azureUpgrade kernel-zfcpdumpUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-default-vdsoUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-default-optionalUpgrade kernel-devel-rtUpgrade kernel-source-azureUpgrade kernel-kvmsmallUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-syms-azureUpgrade dtb-caviumUpgrade kernel-rtUpgrade dtb-freescaleUpgrade dtb-qcomUpgrade dtb-xilinxUpgrade kernel-azureUpgrade dtb-alteraUpgrade dtb-exynosUpgrade dtb-lgUpgrade kernel-azure-optionalUpgrade kernel-symsUpgrade dtb-allwinnerUpgrade kernel-source-vanillaUpgrade dlm-kmp-64kbUpgrade dtb-amazonUpgrade kernel-sourceUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-default-manUpgrade dtb-hisiliconUpgrade kernel-obs-buildUpgrade kernel-rt-extraUpgrade dlm-kmp-azureUpgrade dtb-marvellUpgrade dtb-armUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade kernel-source-rtUpgrade kernel-rt-vdsoUpgrade dtb-renesasUpgrade kernel-64kb-extraUpgrade dtb-apmUpgrade cluster-md-kmp-64kbUpgrade dtb-amdUpgrade kernel-azure-extraUpgrade gfs2-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-rt_debugUpgrade kernel-rt-optionalUpgrade kernel-obs-qaUpgrade kernel-azure-vdsoUpgrade dlm-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade kernel-64kb-optionalUpgrade kernel-rt_debug-vdsoUpgrade dtb-sprdUpgrade kernel-docs-htmlUpgrade kernel-default-extraUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade dtb-appleUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-defaultUpgrade kernel-docsUpgrade dtb-nvidiaUpgrade kernel-syms-rtUpgrade kselftests-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-debugUpgrade cluster-md-kmp-defaultUpgrade dtb-socionextUpgrade dtb-broadcom | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-64k-6.8Upgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-virtual-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-raspiUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.14.0-1016-oemUpgrade linux-image-oracleUpgrade linux-image-ibm-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.14.0-1017-azureUpgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-6.14.0-1017-awsUpgrade linux-image-oracle-6.14Upgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-aws-fips-5.15Upgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-gcp-64kUpgrade linux-image-azure-6.14Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-64k-5.15Upgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-generic-64k-6.14Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-6.8Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-oem-22.04Upgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-realtimeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gke-64kUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-6.14Upgrade linux-image-gcp-6.8Upgrade linux-image-awsUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-oracle-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-raspi-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-aws-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-163-fipsUpgrade linux-image-ibmUpgrade linux-image-azureUpgrade linux-image-ibm-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-6.14Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-intelUpgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-5.15.0-163-genericUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-nvidia-64kUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-aws-6.14Upgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-5.15.0-1097-awsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-oem-22.04bUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-azure-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-realtime-6.14Upgrade linux-image-oracle-5.15Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-gcp-5.15Upgrade linux-image-aws-64k-5.15Upgrade linux-image-fipsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-gkeop-5.15Upgrade linux-image-azure-fipsUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-lowlatency-5.15Upgrade linux-image-5.15.0-1091-ibm | Nov 25, 2025 | Nov 21, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 19, 2025 | Aug 22, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub