In the Linux kernel, the following vulnerability has been resolved:

PCI/sysfs: Add CAP SYS ADMIN check to resource resize store()

Currently, the resource resize store() allows writing to the resourceN resize sysfs attribute to change a BAR's size without checking for capabilities, currently relying only on the file access check.

Resizing a BAR modifies PCI device configuration and can disrupt active drivers. After the upcoming conversion to static attributes, it will also trigger resource file updates via sysfs update groups().

Add a CAP SYS ADMIN check to prevent unprivileged users from performing BAR resize operations.