CVE-2026-97505

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store()

Currently, the __resource_resize_store() allows writing to the

resourceN_resize sysfs attribute to change a BAR's size without checking

for capabilities, currently relying only on the file access check.

Resizing a BAR modifies PCI device configuration and can disrupt active

drivers. After the upcoming conversion to static attributes, it will also

trigger resource file updates via sysfs_update_groups().

Add a CAP_SYS_ADMIN check to prevent unprivileged users from performing BAR

resize operations.

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References