CVE-2026-45904

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

powerpc/eeh: fix recursive pci_lock_rescan_remove locking in EEH event handling

The recent commit 1010b4c012b0 ("powerpc/eeh: Make EEH driver device

hotplug safe") restructured the EEH driver to improve synchronization

with the PCI hotplug layer.

However, it inadvertently moved pci_lock_rescan_remove() outside its

intended scope in eeh_handle_normal_event(), leading to broken PCI

error reporting and improper EEH event triggering. Specifically,

eeh_handle_normal_event() acquired pci_lock_rescan_remove() before

calling eeh_pe_bus_get(), but eeh_pe_bus_get() itself attempts to

acquire the same lock internally, causing nested locking and disrupting

normal EEH event handling paths.

This patch adds a boolean parameter do_lock to _eeh_pe_bus_get(),

with two public wrappers:

eeh_pe_bus_get() with locking enabled.

eeh_pe_bus_get_nolock() that skips locking.

Callers that already hold pci_lock_rescan_remove() now use

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References