CVE-2026-68319

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

pds_core: fix deadlock between reset thread and remove

pci_reset_function() acquires device_lock before performing the reset.

pdsc_remove() is called by the PCI core with device_lock already held.

If pdsc_pci_reset_thread() is running when pdsc_remove() is called,

destroy_workqueue() will block waiting for the work to complete, while

the work is blocked waiting for device_lock - deadlock.

Use pci_try_reset_function() which uses pci_dev_trylock() internally.

This acquires both the device lock and the PCI config access lock

without blocking - if either lock is contended, it returns -EAGAIN

immediately. This avoids the deadlock while also ensuring proper

config space access serialization during the reset.

The pci_dev_get/put calls are also removed as they were unnecessary -

the driver-owned workqueue is destroyed in pdsc_remove(), guaranteeing

the work completes before remove returns. The PCI core holds its

reference

Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

References