PT-2026-20425

CVE-2026-23213

·

Published

2026-01-01

·

Updated

2026-10-18

Description by

CVSS 4.0
5.7
Medium
MetricsAV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The Linux kernel contains a flaw related to memory management during System Management Unit (SMU) Mode 1 reset. During the reset cycle, the Application Specific Integrated Circuit (ASIC) becomes temporarily inaccessible via Peripheral Component Interconnect Express (PCIe). Attempts to access memory-mapped I/O (MMIO) registers during this period, potentially from interrupt handlers or other driver threads, can lead to Non-Maskable Interrupt (NMI) panics or system hangs. The issue is addressed by setting the no hw access flag to true immediately after triggering the reset, preventing further register accesses while the device is offline. A memory barrier smp mb() is added to ensure the flag update is visible across all cores before the driver enters a sleep or wait state.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Vendors
Affected products
Related identifiers
AZL-77858
CLSA-2026-1786824415
ECHO-D3EA-32FC-932F
OESA-2026-2676
OESA-2026-3157
OPENSUSE-SU-2026:20416-1
SUSE-SU-2026:0962-1
SUSE-SU-2026:1081-1
SUSE-SU-2026:20667-1
SUSE-SU-2026:20720-1
SUSE-SU-2026:20838-1
SUSE-SU-2026:20845-1
SUSE-SU-2026:20873-1
SUSE-SU-2026:20876-1
SUSE-SU-2026:20931-1
SUSE-SU-2026:21284-1
USN-8278-1
USN-8278-2
USN-8289-1
USN-8289-2
USN-8296-1
USN-8296-2
USN-8393-1
USN-8440-1
USN-8499-1
Found an issue in the description? Have something to add? Feel free to write us 👾