CVE-2026-43147

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

Revert "PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV"

This reverts commit 05703271c3cd ("PCI/IOV: Add PCI rescan-remove locking

when enabling/disabling SR-IOV"), which causes a deadlock by recursively

taking pci_rescan_remove_lock when sriov_del_vfs() is called as part of

pci_stop_and_remove_bus_device(). For example with the following sequence

of commands:

$ echo <NUM> > /sys/bus/pci/devices/<pf>/sriov_numvfs

$ echo 1 > /sys/bus/pci/devices/<pf>/remove

A trimmed trace of the deadlock on a mlx5 device is as below:

zsh/5715 is trying to acquire lock:

000002597926ef50 (pci_rescan_remove_lock){+.+.}-{3:3}, at: sriov_disable+0x34/0x140

but task is already holding lock:

000002597926ef50 (pci_rescan_remove_lock){+.+.}-{3:3}, at: pci_stop_and_remove_bus_device_locked+0x24/0x80

...

Call Trace:

[<00000259778c4f90>] dump_stack_lvl+0xc0/0x110

[<00000259779c844e>] print_deadlock

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References