CVE-2026-43200

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

PCI: endpoint: Fix swapped parameters in pci_{primary/secondary}_epc_epf_unlink() functions

struct configfs_item_operations callbacks are defined like the following:

int (*allow_link)(struct config_item *src, struct config_item *target);

void (*drop_link)(struct config_item *src, struct config_item *target);

While pci_primary_epc_epf_link() and pci_secondary_epc_epf_link() specify

the parameters in the correct order, pci_primary_epc_epf_unlink() and

pci_secondary_epc_epf_unlink() specify the parameters in the wrong order,

leading to the below kernel crash when using the unlink command in

configfs:

Unable to handle kernel paging request at virtual address 0000000300000857

Mem abort info:

...

pc : string+0x54/0x14c

lr : vsnprintf+0x280/0x6e8

...

string+0x54/0x14c

vsnprintf+0x280/0x6e8

vprintk_default+0x38/0x4c

vprintk+0xc4/0xe0

pci_epf_unbind+0xdc/0x108

configfs_unlink+0xe0/0x208+0x44/0x7

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References