In the Linux kernel, the following vulnerability has been resolved:
misc: pci_endpoint_test: Fix array underflow in pci_endpoint_test_ioctl()
Commit eefb83790a0d ("misc: pci_endpoint_test: Add doorbell test case") added NO_BAR (-1) to the pci_barno enum which, in practical terms, changes the enum from an unsigned int to a signed int. If the user passes a negative number in pci_endpoint_test_ioctl() then it results in an array underflow in pci_endpoint_test_bar().
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-gcp-64kUpgrade linux-image-azure-6.17Upgrade linux-image-6.17.0-1007-aws-64kUpgrade linux-image-virtualUpgrade linux-image-genericUpgrade linux-image-generic-64kUpgrade linux-image-6.17.0-1006-realtimeUpgrade linux-image-realtime-6.17Upgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-raspi-6.17Upgrade linux-image-oracle-64kUpgrade linux-image-virtual-6.17Upgrade linux-image-6.17.0-1008-azureUpgrade linux-image-aws-6.17Upgrade linux-image-gcpUpgrade linux-image-generic-6.17Upgrade linux-image-aws-64kUpgrade linux-image-6.17.0-1008-raspiUpgrade linux-image-6.17.0-14-generic-64kUpgrade linux-image-oracle-6.17Upgrade linux-image-oracleUpgrade linux-image-6.17.0-1007-gcpUpgrade linux-image-oem-6.17Upgrade linux-image-6.17.0-1007-awsUpgrade linux-image-6.17.0-1007-oracleUpgrade linux-image-6.17.0-1011-oemUpgrade linux-image-6.17.0-14-genericUpgrade linux-image-realtimeUpgrade linux-image-gcp-64k-6.17Upgrade linux-image-generic-64k-6.17Upgrade linux-image-oracle-64k-6.17Upgrade linux-image-aws-64k-6.17Upgrade linux-image-awsUpgrade linux-image-6.17.0-1007-oracle-64kUpgrade linux-image-6.17.0-1007-gcp-64kUpgrade linux-image-gcp-6.17 | Feb 13, 2026 | Feb 12, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub