CVE-2026-53067

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the pci epf alloc doorbell() function where the allocated doorbell message array is stored in epf->db msg and epf->num db before MSI vectors are requested. If the MSI allocation fails, the array is freed, but the EPF state continues to point to the freed memory. This can lead to a double-free scenario during subsequent cleanup operations or allow callers to retry allocation incorrectly. Additionally, the function fails to prevent leaking or overwriting existing allocations when doorbells are already allocated.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.