CVE-2026-80620

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

Revert "PCI/MSI: Unmap MSI-X region on error"

This reverts commit 1a8d4c6ecb4c81261bcdf13556abd4a958eca202.

Commit 1a8d4c6ecb4c ("PCI/MSI: Unmap MSI-X region on error") added an

iounmap(dev->msix_base) on the error path of msix_capability_init() to

release the MSI-X region when msix_setup_interrupts() fails.

When msix_setup_interrupts() fails, the call chain is:

msix_setup_interrupts()

-> __msix_setup_interrupts()

struct pci_dev *dev __free(free_msi_irqs) = __dev;

...

return ret; // __free cleanup fires on error

The __free(free_msi_irqs) cleanup calls pci_free_msi_irqs(), which

already handles the unmap:

void pci_free_msi_irqs(struct pci_dev *dev)

{

pci_msi_teardown_msi_irqs(dev);

if (dev->msix_base) {

iounmap(dev->msix_base); // already unmapped here

dev->msix_base = NULL; // and set to NULL

}

}

So dev->msix_base is unmapped an

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References